Description
Dell PowerScale OneFS, versions prior 9.13.0.0, contains an insufficient logging vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information tampering.
Published: 2026-01-22
Score: 4.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Information tampering
Action: Patch
AI Analysis

Impact

Dell PowerScale OneFS, versions prior to 9.13.0.0, suffers from an insufficient logging vulnerability that allows an unauthenticated attacker with remote access to tamper with audit logs, thereby compromising the integrity of logged evidence.

Affected Systems

Dell PowerScale OneFS systems running any version earlier than 9.13.0.0 are affected.

Risk and Exploitability

The vulnerability has a CVSS score of 4.3, indicating moderate severity, and an EPSS score of less than 1%, suggesting a low probability of exploitation. It is not listed in the CISA KEV catalog. The described attack vector is remote and does not require authentication, meaning an external adversary can attempt log tampering without credentials.

Generated by OpenCVE AI on April 18, 2026 at 18:58 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the Dell PowerScale OneFS security update referenced in DSA‑2026‑049 to address the insufficient logging issue
  • Reboot or reload the OneFS services to ensure the patch takes effect and audit logging operates under the updated configuration
  • Reconfigure audit log storage to a separate, read‑only, tamper‑proof medium and enable integrity verification to prevent future tampering

Generated by OpenCVE AI on April 18, 2026 at 18:58 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sat, 18 Apr 2026 19:15:00 +0000

Type Values Removed Values Added
Title Insufficient Logging Vulnerability in Dell PowerScale OneFS

Wed, 28 Jan 2026 18:30:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:a:dell:powerscale_onefs:*:*:*:*:*:*:*:*

Fri, 23 Jan 2026 16:45:00 +0000

Type Values Removed Values Added
First Time appeared Dell
Dell powerscale Onefs
Vendors & Products Dell
Dell powerscale Onefs

Thu, 22 Jan 2026 23:00:00 +0000

Type Values Removed Values Added
Description Dell PowerScale OneFS, versions prior 9.13.0.0, contains an insufficient logging vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information tampering.
Weaknesses CWE-778
References
Metrics cvssV3_1

{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Subscriptions

Dell Powerscale Onefs
cve-icon MITRE

Status: PUBLISHED

Assigner: dell

Published:

Updated: 2026-01-22T18:59:26.824Z

Reserved: 2026-01-07T07:17:24.536Z

Link: CVE-2026-22279

cve-icon Vulnrichment

Updated: 2026-01-22T18:59:19.337Z

cve-icon NVD

Status : Analyzed

Published: 2026-01-22T19:15:56.843

Modified: 2026-01-28T18:16:38.627

Link: CVE-2026-22279

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-04-18T19:00:08Z

Weaknesses