CVE-2024-25953

Summary

CVE-2024-25953 is a vulnerability affecting Dell PowerScale OneFS versions 9.4.0.x through 9.7.0.x. This issue involves a UNIX symbolic link (symlink) following weakness. A local high privileged attacker can potentially exploit this flaw, resulting in denial of service or information tampering. The vulnerability permits the attacker to follow invalid links beyond intended directories, which could cause unintended actions within the affected system. System administrators must promptly apply the recommended patches to prevent potential attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.