CVE-2019-18576

Name of the Vulnerable Software and Affected Versions: Dell EMC XtremIO XMS versions prior to 6.3.0

Description: The issue allows malicious local users with access to log files to potentially gain access to XtremIO with the privileges of a compromised user, as OS users' passwords are logged in local files.

Recommendations: For versions prior to 6.3.0, update to version 6.3.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the log files to minimize the risk of exposed passwords being used by malicious users.