CVE-2023-25536

MEDIUM Year: 2023
CVSS v3 Score
6.7
Medium
Weakness Type
CWE-200
View all →

Vulnerability Description

Dell PowerScale OneFS 9.4.0.x contains exposure of sensitive information to an unauthorized actor. A malicious authenticated local user could potentially exploit this vulnerability in certificate management, leading to a potential system takeover.

Related Vulnerabilities

CVE-2016-5848

MEDIUM
CVSS:6.7(Medium)

Siemens SICAM PAS before 8.07 does not properly restrict password data in the database, which makes it easier for local users to calculate passwords by leveraging unspecified database privileges.

CWE-2002016

CVE-2018-1000143

MEDIUM
CVSS:6.7(Medium)

An exposure of sensitive information vulnerability exists in Jenkins GitHub Pull Request Builder Plugin version 1.39.0 and older in GhprbCause.java that allows an attacker with local file system acces...

CWE-2002018

CVE-2018-1000635

MEDIUM
CVSS:6.7(Medium)

The Open Microscopy Environment OMERO.server version 5.4.0 to 5.4.6 contains a Information Exposure Through Sent Data vulnerability in OMERO.server that can result in an Attacker gaining full administ...

CWE-2002018

CVE-2018-1564

MEDIUM
CVSS:6.7(Medium)

IBM Sterling B2B Integrator Standard Edition 5.2 through 5.2.6 could allow a local user with administrator privileges to obtain user passwords found in debugging messages. IBM X-Force ID: 142968.

CWE-2002018

CVE-2021-0166

MEDIUM
CVSS:6.7(Medium)

Exposure of Sensitive Information to an Unauthorized Actor in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow a ...

CWE-2002021

CVE-2021-21590

MEDIUM
CVSS:6.7(Medium)

Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.1.0.0.5.394 contain a plain-text password storage vulnerability. A local malicious user with high privileges may use the exposed password to ...

CWE-2002021