Sensitive Information Disclosure in Dell PowerFlex Manager

CVE-2025-36599

What is CVE-2025-36599?

Dell PowerFlex Manager VM prior to version 4.6.2.1 contains a vulnerability that allows low privileged attackers with remote access to insert sensitive information into log files. This exploitation can lead to the unintentional disclosure of user credentials, potentially enabling the attacker to gain unauthorized access to the system with the privileges of the compromised account. It is crucial for users to update their systems to mitigate against this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References