CVE-2024-25959
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Summary
CVE-2024-25959 is a vulnerability affecting Dell PowerScale OneFS versions 9.4.0.x through 9.7.0.x. This issue involves the insertion of sensitive information into log files. A local attacker with low privileges can take advantage of this vulnerability, potentially resulting in both sensitive information disclosure and privilege escalation. This weakness in OneFS could pose a significant risk to system security and confidentiality. Organizations using the impacted versions are advised to apply the necessary patches as soon as possible to mitigate these threats.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Dell Technologies, Inc.