Sensitive Information Disclosure in Dell PowerFlex Manager

CVE-2025-36599

What is CVE-2025-36599?

Dell PowerFlex Manager VM prior to version 4.6.2.1 contains a vulnerability that allows low privileged attackers with remote access to insert sensitive information into log files. This exploitation can lead to the unintentional disclosure of user credentials, potentially enabling the attacker to gain unauthorized access to the system with the privileges of the compromised account. It is crucial for users to update their systems to mitigate against this risk.

References