CVE-2025-36599
BaseFortify
Publication date: 2025-07-09
Last updated on: 2025-07-10
Assigner: Dell
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| dell | powerflex_manager | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-532 | The product writes sensitive information to a log file. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in Dell PowerFlex Manager VM versions prior to 4.6.2.1, where sensitive information is inserted into log files. A low privileged attacker with remote access could exploit this to obtain certain user credentials from the logs, potentially allowing them to access the system with the privileges of the compromised account.
How can this vulnerability impact me? :
If exploited, this vulnerability could lead to the disclosure of user credentials, enabling an attacker to gain unauthorized access to the system with the privileges of the compromised account. This could result in unauthorized actions or data exposure depending on the account's permissions.