Dell OpenManage Enterprise Insertion of Sensitive Information into Log File Vulnerability

A vulnerability allowing the insertion of sensitive information into log files has been identified in Dell OpenManage Enterprise versions 3.10, 4.0, 4.1, and 4.2. This issue arises in the Backup and Restore component, where a low-privileged attacker with remote access could exploit the vulnerability, leading to unauthorized information exposure.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive information.

Remediation

Users can upgrade to Dell OpenManage Enterprise version 4.3 or later to address this vulnerability. Version 4.3.2 is available on the Dell Support website.