DSA-2024-417: Security Update for Dell PowerScale OneFS for Security Vulnerability

Zusammenfassung: Dell PowerScale OneFS remediation is available for security vulnerability that could be exploited by malicious users to compromise the affected system.

Dieser Artikel gilt für Dieser Artikel gilt nicht für Dieser Artikel ist nicht an ein bestimmtes Produkt gebunden. In diesem Artikel werden nicht alle Produktversionen aufgeführt.

Auswirkungen

Medium

Details

Proprietary Code CVEs

Description

CVSS Base Score

CVSS Vector String

CVE-2024-47475

Dell PowerScale OneFS 8.2.2.x through 9.8.0.x contains an incorrect permission assignment for critical resource vulnerability. A locally authenticated attacker could potentially exploit this vulnerability, leading to denial of service.

5.0

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:HThis hyperlink is taking you to a website outside of Dell Technologies.

Proprietary Code CVEs

Description

CVSS Base Score

CVSS Vector String

CVE-2024-47475

Dell PowerScale OneFS 8.2.2.x through 9.8.0.x contains an incorrect permission assignment for critical resource vulnerability. A locally authenticated attacker could potentially exploit this vulnerability, leading to denial of service.

5.0

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:HThis hyperlink is taking you to a website outside of Dell Technologies.

Dell Technologies empfiehlt allen Kunden, sowohl die CVSS-Gesamtbewertung als auch alle relevanten zeitlichen und umweltbezogenen Bewertungen zu berücksichtigen, die sich auf den potenziellen Schweregrad einer bestimmten Sicherheitsschwachstelle auswirken können.

Betroffene Produkte und Korrektur

CVEs Addressed

Product

Affected Versions

Remediated Versions

Link

CVE-2024-47475

PowerScale OneFS

Versions 8.2.2.x through 9.4.0.19

Versions 9.4.0.20 or later

PowerScale OneFS Downloads Area

CVE-2024-47475

PowerScale OneFS

Versions 8.2.2.x through 9.5.0.8

Versions 9.5.1.1 or later

PowerScale OneFS Downloads Area

CVE-2024-47475

PowerScale OneFS

Versions 8.2.2.x through 9.7.0.3

Versions 9.7.1.2 or later

PowerScale OneFS Downloads Area

CVE-2024-47475

PowerScale OneFS

Versions 9.8.0.0 through 9.8.0.2

Versions 9.9.0.0 or later

PowerScale OneFS Downloads Area

CVEs Addressed

Product

Affected Versions

Remediated Versions

Link

CVE-2024-47475

PowerScale OneFS

Versions 8.2.2.x through 9.4.0.19

Versions 9.4.0.20 or later

PowerScale OneFS Downloads Area

CVE-2024-47475

PowerScale OneFS

Versions 8.2.2.x through 9.5.0.8

Versions 9.5.1.1 or later

PowerScale OneFS Downloads Area

CVE-2024-47475

PowerScale OneFS

Versions 8.2.2.x through 9.7.0.3

Versions 9.7.1.2 or later

PowerScale OneFS Downloads Area

CVE-2024-47475

PowerScale OneFS

Versions 9.8.0.0 through 9.8.0.2

Versions 9.9.0.0 or later

PowerScale OneFS Downloads Area

Note:
  • Any version not listed in the Affected Products and Remediation section should upgrade PowerScale OneFS to a version 9.7.1.2 or later.
  • We encourage all customers to adopt the Long Term Support (LTS) 2024 version which is 9.7.x code line, with the latest maintenance MR 9.7.1.2.
  • For more information on LTS code lines, see Dell Infrastructure Solutions Group (ISG) LTS Release Support Customer Summary

Revisionsverlauf

Revision

Date

Description

1.0

2024-10-30

Initial Release

2.0

2024-10-31

Updated for enhanced presentation with no changes to content

Zugehörige Informationen

Betroffene Produkte

PowerScale OneFS
Artikeleigenschaften
Artikelnummer: 000242681
Artikeltyp: Dell Security Advisory
Zuletzt geändert: 31 Okt. 2024
Antworten auf Ihre Fragen erhalten Sie von anderen Dell NutzerInnen
Support Services
Prüfen Sie, ob Ihr Gerät durch Support Services abgedeckt ist.