[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2024-25960":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":19,"cwes":20,"cpes":22,"technologies":24,"references":26,"score":28,"epss_score":29,"epss_percentile":30,"is_kev":19,"cisa_kev_date_added":31,"cisa_kev_due_date":31,"cisa_ssvc":32,"attack_mappings":42,"exploits":67},34840,"CVE-2024-25960","EUVD-2024-23262","Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.x contains a cleartext transmission of sensitive information vulnerability. A local low privileged attacker could potentially exploit this vulnerability, leading to escalation of privileges.","2024-03-28T19:15:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":15,"userInteraction":17,"attackComplexity":18,"availabilityImpact":15,"privilegesRequired":18,"confidentialityImpact":15},"UNCHANGED","3.1",7.8,"LOCAL","HIGH","CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","NONE","LOW",false,[21],"CWE-319",[23],"cpe:2.3:o:dell:powerscale_onefs:*:*:*:*:*:*:*:*",[25],"Dell Powerscale Onefs",[27],"https:\u002F\u002Fwww.dell.com\u002Fsupport\u002Fkbdoc\u002Fen-us\u002F000223366\u002Fdsa-2024-115-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities",0.39,0.00113,0.01433,null,{"timestamp":33,"automatable":34,"tech_impact":35,"exploitation":36,"cisa_decision":37,"cisa_remediation_timeline":41},"2024-08-12T20:12:52.564587Z","no","total","none",{"vector":38,"decision":39,"priority":40},"CISAv1\u002FE:N\u002FA:N\u002FT:T\u002FM:H\u002F2026-10-25T17:38:16.435434\u002F","track_star","medium","14D",[43,49,59],{"name":44,"source":45,"tactics":46,"technique_id":48},"Exploitation for Privilege Escalation","attack_vector",[47],"privilege-escalation","T1068",{"name":50,"source":51,"cwe_ids":52,"tactics":53,"capec_ids":56,"technique_id":58},"Network Sniffing","capec",[21],[54,55],"credential-access","discovery",[57],"CAPEC-65","T1040",{"name":60,"source":51,"cwe_ids":61,"tactics":62,"capec_ids":64,"technique_id":66},"Credential API Hooking",[21],[63,54],"collection",[65],"CAPEC-383","T1056.004",[]]