Dell PowerFlex Manager VM Insertion of Sensitive Information into Log File Vulnerability

A vulnerability allowing the insertion of sensitive information into log files has been identified in Dell PowerFlex Manager VM versions prior to 4.6.2.1. This vulnerability could be exploited by a low-privileged attacker with remote access, potentially leading to the disclosure of certain user credentials. The exposed credentials might be used to access the system with the privileges of the compromised account.

Impact

Exploitation of this vulnerability could result in the unauthorized disclosure of user credentials, which may be used to access the system with the privileges of the compromised account.

Remediation

Users are advised to upgrade to Dell PowerFlex Manager VM version 4.6.2.1 or later. For assistance, visit the Dell PowerFlex Support page.