CVE-2024-24901 Information disclosure in PowerScale OneFS
A local high-privilege user can cause audit messages to be lost, preventing proper security logging in Dell PowerScale OneFS.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-24901?
CVE-2024-24901 is a low-severity vulnerability in Dell Powerscale Onefs, published on 4 Mar 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Dell PowerScale OneFS 8.2.x through 9.6.0.x contain an insufficient logging vulnerability. A local malicious user with high privileges could potentially exploit this vulnerability, causing audit messages lost and not recorded for a specific time period.
Weakness: CWE-778
Which versions are affected by CVE-2024-24901?
It affects 1 product.
Products include Dell Powerscale Onefs.
How do I fix CVE-2024-24901?
No fix has been published for CVE-2024-24901 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-24901 being exploited?
There is no known exploitation of CVE-2024-24901 in the wild and no public exploit code.
Other vulnerabilities in Dell Powerscale Onefs
Sources
Also known as GHSA-6jqg-q6mq-24mg.