CVE-2023-32494

MEDIUM Year: 2023
CVSS v3 Score
6.7
Medium
Weakness Type
CWE-274
View all →

Vulnerability Description

Dell PowerScale OneFS, 8.0.x-9.5.x, contains an improper handling of insufficient privileges vulnerability. A local privileged attacker could potentially exploit this vulnerability, leading to elevation of privilege and affect in compliance mode also.

Related Vulnerabilities

CVE-2025-20177

MEDIUM
CVSS:6.7(Medium)

A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local attacker to bypass Cisco IOS XR image signature verification and load unverified software on an affecte...

CWE-2742025

CVE-2022-23511

MEDIUM
CVSS:6.8(Medium)

A privilege escalation issue exists within the Amazon CloudWatch Agent for Windows, software for collecting metrics and logs from Amazon EC2 instances and on-premises servers, in versions up to and in...

CWE-2742022

CVE-2021-35534

HIGH
CVSS:7.2(High)

Insufficient security control vulnerability in internal database access mechanism of Hitachi Energy Relion 670/650/SAM600-IO, Relion 650, GMS600, PWC600 allows attacker who successfully exploited this...

CWE-2742021

CVE-2024-41942

HIGH
CVSS:7.2(High)

JupyterHub is software that allows one to create a multi-user server for Jupyter notebooks. Prior to versions 4.1.6 and 5.1.0, if a user is granted the `admin:users` scope, they may escalate their own...

CWE-2742024

CVE-2017-3912

HIGH
CVSS:7.8(High)

Bypassing password security vulnerability in McAfee Application and Change Control (MACC) 7.0.1 and 6.2.0 allows authenticated users to perform arbitrary command execution via a command-line utility.

CWE-2742017

CVE-2020-24676

HIGH
CVSS:7.8(High)

In Symphony Plus Operations and Symphony Plus Historian, some services can be vulnerable to privilege escalation attacks. An unprivileged (but authenticated) user could execute arbitrary code and resu...

CWE-2742020