CVE-2022-34445

Published: Feb 11, 2023Modified: Jun 17, 2026

4.4

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Exploitability: 0.8 / Impact: 3.6

Source: NVD

Description

Dell PowerScale OneFS, versions 8.2.x through 9.3.x contain a weak encoding for a password. A malicious local privileged attacker may potentially exploit this vulnerability, leading to information disclosure.

Affected (9)

Products: Dell: Powerscale Onefs

Dell

1 product

Powerscale Onefs

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Dell Powerscale Onefs	Version 8.2.0
Dell Powerscale Onefs	Version 8.2.1
Dell Powerscale Onefs	Version 8.2.2
Dell Powerscale Onefs	Version 9.0.0
Dell Powerscale Onefs	Version 9.1.0
Dell Powerscale Onefs	Version 9.1.1
Dell Powerscale Onefs	Version 9.2.0
Dell Powerscale Onefs	Version 9.2.1
Dell Powerscale Onefs	Version 9.3.0

Related CWEs

CWE-261

Weak Encoding for Password

Obscuring a password with a trivial encoding does not protect the password.

CWE-522

Insufficiently Protected Credentials

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

References (2)

https://www.dell.com/support/kbdoc/en-us/000205618/dsa-2022-271

Source: security_alert@emc.com

Vendor Advisory

https://www.dell.com/support/kbdoc/en-us/000205618/dsa-2022-271

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.