CVE-2022-22549

Dell PowerScale OneFS, 8.2.x-9.3.x, contains a Improper Certificate Validation. A unauthenticated remote attacker could potentially exploit this vulnerability, leading to a man-in-the-middle capture of administrative credentials.

Score

CVSS 3.1 8.1 High

Status

Modified - security_alert@emc.com

Published

2022-04-12

Last modified

2024-09-16

Weaknesses

CWE-295

Affected products

• Emc Powerscale Onefs (Dell)
• Powerscale Onefs (Dell)

References

• https://www.dell.com/support/kbdoc/en-us/000195815/dsa-2022-002-dell-emc-powerscale-onefs-security-update-for-multiple-…