CVE-2022-22563

Published: Apr 8, 2022Modified: Jun 17, 2026

4.4

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Exploitability: 0.8 / Impact: 3.6

Source: NVD

Description

Dell EMC Powerscale OneFS 8.2.x - 9.2.x omit security-relevant information in /etc/master.passwd. A high-privileged user can exploit this vulnerability to not record information identifying the source of account information changes.

Affected (1)

Products: Dell: Emc Powerscale Onefs

Dell

1 product

Emc Powerscale Onefs

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Dell Emc Powerscale Onefs	From 8.2.0 to 9.3.0.0

Related CWEs

CWE-223

Omission of Security-relevant Information

The product does not record or display information that would be important for identifying the source or nature of an attack, or determining if an action is safe.

References (3)

https://www.dell.com/support/kbdoc/000196657

Source: security_alert@emc.com

Permissions RequiredVendor Advisory

https://www.dell.com/support/kbdoc/en-an/000197991/dell-emc-powerscale-onefs-security-update-for-multiple-component-vulnerabilities

Source: nvd@nist.gov

Vendor Advisory

https://www.dell.com/support/kbdoc/000196657

Source: af854a3a-2127-422b-91ae-364da2661108

Permissions RequiredVendor Advisory

Timeline

No history available yet.