Sensitive Information Exposure in Dell PowerScale OneFS

CVE-2025-43937

What is CVE-2025-43937?

Dell PowerScale OneFS, in versions prior to 9.12.0.0, has a vulnerability that allows an attacker with local access to exploit a flaw in the logging mechanism. This flaw may lead to the inclusion of sensitive information in log files, potentially exposing user credentials. An attacker leveraging this exposure could gain unauthorized access to the application utilizing the compromised account's privileges, raising significant security concerns for users and administrators.

References