Dell XtremIO Insertion of Sensitive Information into Log File Vulnerability

A vulnerability allowing the insertion of sensitive information into log files has been identified in Dell XtremIO versions 6.4.0-22. This issue could be exploited by a low-privileged attacker with local access, potentially leading to unauthorized information exposure. The exposed credentials might be used to access the vulnerable application with the privileges of the compromised account.

Impact

Exploitation of this vulnerability could result in unauthorized access to the application, using the privileges of the compromised account.

Remediation

Users are advised to upgrade to version 6.4.3 or later. For Dell XtremIO X2 TechAdvisor users, version 3.4 is recommended. Contact Dell customer support for the upgrade.