Dell XtremIO X2 TechAdvisor Insertion of Sensitive Information into Log File Vulnerability

A vulnerability allowing the insertion of sensitive information into log files has been identified in TechAdvisor versions 2.6 through 3.37-30 for Dell XtremIO X2. This vulnerability could be exploited by a low-privileged attacker with local access, leading to unauthorized information exposure. The exposed credentials might be used to access the vulnerable application with the privileges of the compromised account.

Impact

Exploitation of this vulnerability could result in unauthorized access to the application, using the privileges of the compromised account.

Remediation

Users are advised to upgrade to TechAdvisor version 3.4. Instructions for upgrading can be obtained by contacting Dell customer support.