Information Disclosure Vulnerability in Dell EMC XtremIO Storage Management Software

CVE-2019-18576

Summary

The Dell EMC XtremIO storage management system suffers from a vulnerability that allows local OS users to access sensitive information due to improper logging practices. Specifically, user passwords are recorded in local log files. Malicious local users who gain access to these logs can exploit the leaked credentials to infiltrate the XtremIO system with the permissions of the affected user, potentially leading to unauthorized access and data breaches. Administrators are urged to update to the latest version to mitigate this risk.

References