Sensitive Information Exposure in Dell PowerScale OneFS Logs

Executive Summary

This vulnerability exists in Dell PowerScale OneFS versions prior to 9.12.0.0 and involves the insertion of sensitive information into log files.

A low privileged attacker with local access could exploit this issue to disclose certain user credentials.

The attacker may then use these exposed credentials to access the vulnerable application with the privileges of the compromised account.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can lead to the disclosure of sensitive user credentials to an attacker with local access and low privileges.

This could allow the attacker to gain unauthorized access to the application with the compromised user's privileges.

Such unauthorized access could result in significant impact, including potential data exposure or disruption of services.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability involves the insertion of sensitive information into log files, which can lead to the disclosure of user credentials. Such exposure of sensitive data could potentially impact compliance with data protection regulations like GDPR and HIPAA, which require the protection of personal and sensitive information.

If attackers exploit this vulnerability to access user credentials and gain unauthorized access, it may result in violations of confidentiality and data security requirements mandated by these standards.

Useful 0 Not Useful 0