6.6
Medium
CVE-2025-43937 Dell PowerScale OneFS, versions prior to 9.12.0.0, contains an insertion of sensitive information into log file…
Description
Dell PowerScale OneFS, versions prior to 9.12.0.0, contains an insertion of sensitive information into log file vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable application with privileges of the compromised account.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| PowerScale OneFS 9.12 | earliest → < 9.12.0.0 | 9.12.0.0 |
| PowerScale OneFS 9.7 | 9.7.0.0 → < 9.7.1.9 | 9.7.1.9 |
| PowerScale OneFS 9.5 | 9.5.0.0 → < 9.10.1.3 | 9.10.1.3 |
Other CVEs of PowerScale OneFS
The 175 CVEs of PowerScale OneFS →
CVE-2026-46460
Dell PowerScale OneFS, versions 9.5.0.0 through 9.7.1.15, versions 9.8.0.0 through 9.13.1.0, and versions prior to…
3.5
Low
CVE-2026-40635
Dell PowerScale OneFS versions 9.12.0.0 through 9.13.1.0 contain an Insecure Temporary File vulnerability
5.4
Medium
CVE-2026-70425
Dell PowerScale OneFS, Versions 9.5.0.0 through 9.7.1.0, Versions 9.8.0.0 through 9.10.1.0, and Versions 9.11.0.0…
6.7
Medium
CVE-2026-40633
Dell PowerScale OneFS versions 9.5.0.0 through 9.10.1.7, versions 9.11.0.0 through 9.13.0.2 contains an Insertion of…
7.8
High