Information Exposure Vulnerability in Dell XtremIO

CVE-2025-30105

What is CVE-2025-30105?

Dell XtremIO version 6.4.0-22 is vulnerable to a significant information exposure issue due to the insertion of sensitive data into log files. This vulnerability can be exploited by low-privileged attackers who have local access to the system. By leveraging this flaw, attackers might gain access to sensitive credentials stored within the logs, enabling them to potentially manipulate the application with the permissions of the compromised account. Organizations using this version should promptly update their systems to mitigate the risk associated with this vulnerability.

References