CVE-2025-43724
—CVSS 3.1
4.4 medium
EPSS
<1%p3
Published
()
Modified
Description
Dell PowerScale OneFS, versions prior to 9.12.0.0, contains an authorization bypass through user-controlled key vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability to gain unauthorized access to NFSv4 or SMB shares.
- Vendors
- dell
- Products
- powerscale onefs
- Weakness
- CWE-639
- Vector
- CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
In the news0 stories
No ingested article mentions this CVE yet.