CVE-2024-24901

CVSS 3.1 Score 2.3 of 10 (low)

Details

Published Mar 4, 2024
Updated: Jan 8, 2025
CWE ID 778

Summary

CVE-2024-24901 is a vulnerability affecting Dell PowerScale OneFS versions 8.2.x through 9.6.0.x. This issue involves insufficient logging, allowing a local user with elevated privileges to manipulate audit messages. Consequentially, important audit information may go unrecorded, potentially compromising the security and compliance posture of the affected system. The extent and duration of the impact are contingent upon the exploitation of this vulnerability. Dell has released updates to address this issue, and administrators are encouraged to apply them promptly to mitigate any potential risks.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Dell PowerScale OneFS

Affected Vendors

  • Dell Technologies, Inc.