Dell PowerScale OneFS includes an insufficient logging flaw that allows a local attacker with low privileges to tamper with audit logs, leading to information tampering. This vulnerability is classified under CWE-778, which covers insufficient logging mechanisms.

Affected systems are Dell PowerScale OneFS across versions 9.5.0.0–9.5.1.6, 9.6.0.0–9.7.1.13, 9.8.0.0–9.10.1.5, and 9.11.0.0–9.12.0.1. Users running any of these build ranges should verify their deployments.

The CVSS score of 3.3 indicates low severity, and the EPSS score is not available. The vulnerability is not listed in CISA's KEV catalog. Local access with low privileges is required, meaning that exploitation is limited to machines accessible by the attacker. Though the impact is confined to information tampering, an attacker could hide malicious activity or mislead forensic investigations by altering logs, so the risk is mainly to audit integrity rather than system compromise.