EUVD-2025-209506Severity by source
AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H
Local access and low privilege required per description; high confidentiality for credential exposure; availability impact absent from described vulnerability behavior.
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
5DescriptionCVE.org
Dell PowerScale OneFS, versions prior to 9.12.0.0, contains an insertion of sensitive information into log file vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable application with privileges of the compromised account.
AnalysisAI
Credential exposure in Dell PowerScale OneFS affects all versions prior to 9.12.0.0, where sensitive authentication material is inadvertently written to log files readable by low-privileged local users. A locally authenticated attacker who triggers the relevant logging path and can read the resulting log files may extract credentials belonging to other users, then authenticate as those accounts to operate at the victim's privilege level. No public exploit code exists (EPSS 0.01%, SSVC exploitation: none), positioning this as a post-compromise lateral movement or privilege escalation risk rather than an initial access vector.
Technical ContextAI
Dell PowerScale OneFS (formerly Isilon OneFS) is an enterprise-grade scale-out NAS operating system deployed on clustered hardware nodes providing unified file services at petabyte scale. The vulnerability class is CWE-532 (Insertion of Sensitive Information into Log File), wherein authentication material - likely passwords, tokens, or session identifiers - is inadvertently captured in persistent log entries during authentication flows or error-handling routines. CPE cpe:2.3:a:dell:powerscale_onefs confirms scope is the OneFS software stack itself, not the underlying hardware appliance. The logging defect breaks the principle of least privilege in the logging subsystem: credential data written for diagnostic purposes becomes readable by users with lower authority than the original credential owner, creating an unintended cross-account information disclosure path.
RemediationAI
The primary remediation is upgrading Dell PowerScale OneFS to version 9.12.0.0 or later. For environments on maintenance branches, Dell has released fixes in version 9.5.1.5 or later (9.5 branch), 9.10.1.3 or later (9.10 branch), and 9.7.1.9 or later (9.7 branch), per EUVD data. The Dell advisory DSA-2025-347 (https://www.dell.com/support/kbdoc/en-us/000376214/dsa-2025-347-security-update-for-dell-powerscale-onefs-multiple-vulnerabilities) should be consulted for the full patching matrix and any deployment prerequisites. Where immediate patching is not feasible, restrict local shell access to OneFS cluster nodes to only operationally required accounts, and audit log file ACLs to prevent low-privileged users from reading system or authentication log directories - note that restricting log access may impair operator troubleshooting workflows. Additionally, rotate credentials for any accounts that may have authenticated through the affected code paths during the exposure window, prioritizing privileged and administrative accounts.
More in Powerscale Onefs
View allDell PowerScale OneFS, versions 9.5.0.0 through 9.10.1.0, contains a use of default password vulnerability. Rated critic
CVE-2024-53298 is a critical missing authorization vulnerability in Dell PowerScale OneFS NFS export functionality that
Dell PowerScale OneFS, 9.5.0.x, contains a protection mechanism bypass vulnerability. Rated critical severity (CVSS 9.8)
Dell PowerScale OneFS, versions 8.2.x-9.2.x, contain broken or risky cryptographic algorithm. Rated critical severity (C
Dell PowerScale OneFS 8.2.x through 9.6.0.x contains a use of a broken or risky cryptographic algorithm vulnerability. R
Dell PowerScale OneFS, versions 8.2.2.x-9.5.0.x, contains an improper privilege management vulnerability. Rated high sev
Dell PowerScale OneFS versions 8.1.0-9.1.0 contain an Incorrect User Management vulnerability.under some specific condit
Powerscale Onefs versions up to 9.13.0.0 is affected by improper restriction of excessive authentication attempts (CVSS
Dell PowerScale OneFS versions 8.2.x through 9.8.0.x contain a use of hard coded credentials vulnerability. Rated high s
Dell PowerScale OneFS versions 8.2.2.x through 9.6.0.x contains an improper control of a resource through its lifetime v
Dell PowerScale OneFS versions 9.5.0.0 through 9.10.1.6 and 9.11.0.0 through 9.13.0.1 contain an incorrect privilege ass
Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.2 contain an execution with unnecessary privileges vulnerability. R
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today