PT-2025-31423 · Dell · Techadvisor+1

Published 2025-07-29 · Updated 2025-07-31 · CVE-2025-26332

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TechAdvisor versions 2.6 through 3.37-30

Description TechAdvisor versions 2.6 through 3.37-30 for Dell XtremIO X2 contain an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure. The attacker may be able to use the exposed credentials to access the vulnerable application with privileges of the compromised account.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

BDU:2025-09261

CVE-2025-26332

Affected Products

Dell Xtremio X2

Techadvisor

References · 7

• https://osv.dev/vulnerability/CVE-2025-26332 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-26332 · Security Note
• https://dell.com/support/kbdoc/en-us/000337241/dsa-2025-108-security-update-for-dell-emc-xtremio-x2 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-09261 · Security Note
• https://twitter.com/VulmonFeeds/status/1950761052120981878 · Twitter Post
• https://twitter.com/CVEnew/status/1950623330266218845 · Twitter Post
• https://twitter.com/CveFindCom/status/1950620097170612679 · Twitter Post