Description
Dell PowerFlex Manager, versions 4.6.2 and prior, contains an Open Redirect Vulnerability. An unauthenticated attacker could potentially exploit this vulnerability, leading to a targeted application user being redirected to arbitrary web URLs. The vulnerability could be leveraged by attackers to conduct phishing attacks that cause users to divulge sensitive information.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Dell PowerFlex Manager (Appliance)
Default version status: unaffected
0 to < IC 48.378.00affected0 to < IC 48.383.00affected
Dell PowerFlex Manager (Rack)
Default version status: unaffected
0 to < 3.7.8.0affected0 to < 3.8.3.0affected
Dell PowerFlex Manager
Default version status: unaffected
0 to ≤ 4.6.2affected
References
- https://www.dell.com/support/kbdoc/en-us/000391568/dsa-2025-435-security-update-for-dell-powerflex-rack-multiple-third-party-component-vulnerabilities ↗
- https://www.dell.com/support/kbdoc/en-us/000391392/dsa-2025-434-security-update-for-dell-powerflex-appliance-multiple-third-party-component-vulnerabilities ↗