Dell PowerScale OneFS may expose sensitive data in error messages. The flaw allows a high‑privileged local attacker to view confidential information that should not appear in error logs. This is a classic data‑exposure weakness identified as CWE‑209. The vulnerability results in the unnecessary leakage of potentially critical system details to local users with sufficient privileges, compromising confidentiality but not allowing system compromise or remote control.

The affected products are Dell PowerScale OneFS. Versions 9.5.0.0 through 9.10.1.6 and versions 9.11.0.0 through 9.13.0.0 are impacted. No other vendors or products are mentioned.

The CVSS score of 4.4 indicates moderate severity, and the EPSS score of less than 1% suggests low likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires local, high‑privilege access, so the attack vector is inferred to be local. A privileged user can trigger or read error messages that contain sensitive data, potentially revealing configuration or credential information.