CVE-2024-24901: Dell Powerscale Onefs

Low severity, CVSS 2.3. EPSS: 0.1% chance of exploitation in the next 30 days.

Dell PowerScale OneFS 8.2.x through 9.6.0.x contain an insufficient logging vulnerability. A local malicious user with high privileges could potentially exploit this vulnerability, causing audit messages lost and not recorded for a specific time period.

Affected products

• Dell Powerscale Onefs: from 8.2.0, before 9.2.1.25 (fixed in 9.2.1.25); from 9.3.0.0, before 9.4.0.17 (fixed in 9.4.0.17); from 9.5.0.0, before 9.5.0.7 (fixed in 9.5.0.7); version 9.6.1 only

Published 2024-03-04. Last modified 2026-06-17.