CVE-2023-32457 Privilege escalation in PowerScale OneFS

High 7.5 Published 29 Aug 2023 Updated 2 Oct 2024

A remote attacker with low privileges can exploit improper privilege management in Dell PowerScale OneFS to escalate privileges.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2023-32457?

CVE-2023-32457 is a high-severity vulnerability in Dell Powerscale Onefs, published on 29 Aug 2023. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

Dell PowerScale OneFS, versions 8.2.2.x-9.5.0.x, contains an improper privilege management vulnerability. A remote attacker with low privileges could potentially exploit this vulnerability, leading to escalation of privileges.

Weakness: CWE-269, CWE-267

Which versions are affected by CVE-2023-32457?

It affects 1 product.

Products include Dell Powerscale Onefs.

How do I fix CVE-2023-32457?

No fix has been published for CVE-2023-32457 yet. Limit exposure of the affected software until one is available.

Is CVE-2023-32457 being exploited?

There is no known exploitation of CVE-2023-32457 in the wild and no public exploit code.

All Dell Powerscale Onefs vulnerabilities

Sources

Also known as GHSA-499p-r546-m762.