CVE-2023-32478

Name of the Vulnerable Software and Affected Versions Dell PowerStore versions prior to 3.5.0.1

Description The issue concerns the insertion of sensitive information into log files. A malicious user with high privileges could exploit this, leading to sensitive information disclosure.

Recommendations For versions prior to 3.5.0.1, update to version 3.5.0.1 or later to resolve the issue. As a temporary workaround, consider restricting access to log files to minimize the risk of sensitive information disclosure.