Sensitive Information Disclosure Vulnerability in Dell PowerStore
CVE-2023-32478

9CRITICAL

Key Information:

Vendor

Dell
Status
Powerstore
Vendor
CVE Published:
21 July 2023

What is CVE-2023-32478?

Dell PowerStore versions before 3.5.0.1 are susceptible to a vulnerability where sensitive information can be inadvertently logged. This flaw allows a malicious user with high privileges to potentially access confidential data through the logs, posing a risk to organizational security. It is essential for users to upgrade to the latest version to mitigate this risk and protect sensitive information.

Affected Version(s)

PowerStore Versions prior to 3.5.0.1-2083289

References

https://www.dell.com/support/kbdoc/en-us/000215171/dsa-20...
vendor-advisory

CVSS V3.1

Score:
9
Severity:
CRITICAL
Confidentiality:
Low
Integrity:
High
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.