Vulnerability CVE-2023-25940


Published: 2023-04-04

Description:
Dell PowerScale OneFS version 9.5.0.0 contains improper link resolution before file access vulnerability in isi_gather_info. A low privilege local attacker could potentially exploit this vulnerability, leading to system takeover and it breaks the compliance mode guarantees.

Type:

CWE-59

(Improper Link Resolution Before File Access ('Link Following'))

 References:
https://www.dell.com/support/kbdoc/en-us/000211539/dell-emc-powerscale-onefs-security

Copyright 2024, cxsecurity.com

 

Back to Top