Description

Dell PowerScale OneFS versions 9.12.0.0 through 9.13.1.0 contain an Insecure Temporary File vulnerability. A low privileged remote attacker could potentially exploit this vulnerability, leading to denial of service and information tampering.

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "5.4",
  "pubDate": "2026-09-09T17:17:21.123Z",
  "pubdate": "2026-09-09T17:17:21.123Z",
  "executiveSummary": "Dell PowerScale OneFS versions 9.12.0.0 through 9.13.1.0 are affected by an Insecure Temporary File vulnerability.\nThis vulnerability originates from improper handling of temporary file creation within the filesystem environment, allowing for potential manipulation by unauthorized entities.\nThe flaw carries significant risk, as it allows a low-privileged remote attacker to interfere with system operations, leading to Denial of Service (DoS) and unauthorized Information Tampering.\nExploitation requires network access to the target system, though it does not necessitate administrative or elevated privileges.\nSuccessful exploitation compromises the integrity of temporary data and the availability of the affected system services, posing a critical operational threat to storage environments managed by PowerScale OneFS.\nThe vulnerability underscores the necessity for robust file permission management and secure temporary file handling practices within privileged system processes.",
  "technicalDetails": "The vulnerability resides in the way Dell PowerScale OneFS handles the lifecycle of temporary files generated during system operations. In affected versions (9.12.0.0 through 9.13.1.0), the mechanism used to create or access these files lacks sufficient strictness regarding permissions and naming predictability, or fails to properly enforce secure access controls during the file creation sequence.\nThe root cause is identified as an insecure implementation of temporary file management, which likely involves race conditions or predictable file paths that allow non-privileged users to interact with, overwrite, or replace sensitive data before the system or an authorized process completes its intended operation.\nAn attack flow typically begins with a low-privileged remote attacker identifying the specific directory or naming convention used by a vulnerable OneFS service for temporary storage. Once the attacker observes the initiation of an automated process, they can execute a 'symlink attack' or a file replacement strategy. By creating a symlink at the predictable temporary file path before the legitimate process accesses it, the attacker can redirect file I/O operations to unauthorized locations.\nWhen the vulnerable system process executes with higher privileges, it unknowingly interacts with the attacker-controlled file instead of the intended temporary resource. If the process writes data, the attacker can perform information tampering by intercepting sensitive configuration or runtime data. Alternatively, if the process relies on the integrity of this file to proceed, the attacker can induce a Denial of Service by locking the file, corrupting its content, or forcing the process to enter an undefined state that crashes the service.\nBecause the vulnerability is exploitable by a remote attacker with low-level privileges, the attack surface includes any network-accessible service interface that triggers these temporary file routines. The exploitation does not require advanced memory corruption techniques, as it leverages logic flaws within the OS's file handling system. The post-exploitation impact includes the potential to destabilize the storage cluster availability and bypass security controls reliant on the integrity of temporary artifacts."
}