Description
Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Exposure of Information Through Directory Listing vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Dell PowerFlex Manager (Appliance)
Default version status: unaffected
0 to < IC 48.378.00affected0 to < IC 48.383.00affected
Dell PowerFlex Manager (Rack)
Default version status: unaffected
0 to < 3.7.8.0affected0 to < 3.8.3.0affected
Dell PowerFlex Manager
Default version status: unaffected
0 to ≤ 4.6.2affected
References
- https://www.dell.com/support/kbdoc/en-us/000391568/dsa-2025-435-security-update-for-dell-powerflex-rack-multiple-third-party-component-vulnerabilities ↗
- https://www.dell.com/support/kbdoc/en-us/000391392/dsa-2025-434-security-update-for-dell-powerflex-appliance-multiple-third-party-component-vulnerabilities ↗