PT-2025-28957 · Dell · Dell Powerflex Manager

Published 2025-07-07 · Updated 2025-07-10 · CVE-2025-36599

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Dell PowerFlex Manager VM versions prior to 4.6.2.1

Description: Dell PowerFlex Manager VM is affected by an issue allowing the insertion of sensitive information into log files. A low-privileged attacker with remote access could exploit this, potentially leading to the disclosure of user credentials. An attacker may use these exposed credentials to access the system with the privileges of the compromised account.

Recommendations: Update Dell PowerFlex Manager VM to version 4.6.2.1 or later.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

BDU:2025-10392

CVE-2025-36599

Affected Products

Dell Powerflex Manager

References · 5

• https://dell.com/support/kbdoc/en-us/000342158/dsa-2025-279-security-update-for-dell-powerflex-manager-platform-pfmp-proprietary-code-vulnerability · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-36599 · Security Note
• https://osv.dev/vulnerability/CVE-2025-36599 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-10392 · Security Note
• https://twitter.com/CVEnew/status/1943335894544445511 · Twitter Post