Dell PowerFlex appliance versions prior to IC 46.381.00 and IC 46.376.00, Dell PowerFlex rack versions prior to RCM 3.8.1.0 (for RCM 3.8.x train) and prior to RCM 3.7.6.0 (for RCM 3.7.x train), Dell PowerFlex custom node using PowerFlex Manager versions prior to 4.6.1.0, Dell InsightIQ versions prior to 5.1.1, and Dell Data Lakehouse versions prior to 1.2.0.0 contain an Insecure Storage of Sensitive Information vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to information disclosure. The attacker may be able to use information disclosed to gain unauthorized access to pods within the cluster.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Dell PowerFlex appliance
Vendor
Dell
Product
Dell PowerFlex appliance
Platforms
Unknown
Default status
unaffected
Dell PowerFlex appliance · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
N/A
affected
semver
46.381.00
Unavailable
None listed
N/A
affected
semver
46.376.00
Unavailable
None listed
Dell PowerFlex rack
Vendor
Dell
Product
Dell PowerFlex rack
Platforms
Unknown
Default status
unaffected
Dell PowerFlex rack · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
N/A
affected
semver
3.8.1.0
Unavailable
None listed
N/A
affected
semver
3.7.6.0
Unavailable
None listed
Dell PowerFlex custom node
Vendor
Dell
Product
Dell PowerFlex custom node
Platforms
Unknown
Default status
unaffected
Dell PowerFlex custom node · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
N/A
affected
semver
4.6.1.0
Unavailable
None listed
Dell InsightIQ
Vendor
Dell
Product
Dell InsightIQ
Platforms
Unknown
Default status
unaffected
Dell InsightIQ · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
N/A
affected
semver
5.1.1
Unavailable
None listed
Dell Data Lakehouse
Vendor
Dell
Product
Dell Data Lakehouse
Platforms
Unknown
Default status
unaffected
Dell Data Lakehouse · Scoped product and version facts