CVE-2022-34445

Summary

Dell PowerScale OneFS, versions 8.2.x through 9.3.x contain a weak encoding for a password. A malicious local privileged attacker may potentially exploit this vulnerability, leading to information disclosure.

Affected Software

VendorProductVersion RangeStatus
DellPowerScale OneFS8.2.x <= 9.3.xaffected

Weaknesses

  • CWE-261: CWE-261: Weak Encoding for Password

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References