CVE-2024-24901

Published: Mar 4, 2024Modified: Jun 17, 2026

2.3

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

Exploitability: 0.8 / Impact: 1.4

Source: NVD

Description

Dell PowerScale OneFS 8.2.x through 9.6.0.x contain an insufficient logging vulnerability. A local malicious user with high privileges could potentially exploit this vulnerability, causing audit messages lost and not recorded for a specific time period.

Affected (4)

Products: Dell: Powerscale Onefs

Dell

1 product

Powerscale Onefs

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Dell Powerscale Onefs	From 8.2.0 to 9.2.1.25
Dell Powerscale Onefs	From 9.3.0.0 to 9.4.0.17
Dell Powerscale Onefs	From 9.5.0.0 to 9.5.0.7
Dell Powerscale Onefs	Version 9.6.1

Related CWEs

CWE-778

Insufficient Logging

When a security-critical event occurs, the product either does not record the event or omits important details about the event when logging it.

References (2)

https://www.dell.com/support/kbdoc/en-us/000222691/dsa-2024-062-security-update-for-dell-powerscale-onefs-for-proprietary-code-vulnerabilities

Source: security_alert@emc.com

Vendor Advisory

https://www.dell.com/support/kbdoc/en-us/000222691/dsa-2024-062-security-update-for-dell-powerscale-onefs-for-proprietary-code-vulnerabilities

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.