Dell PowerFlex Manager vulnerabilities

A vulnerability in Dell PowerFlex Manager prior to version 5.1.0.1 allows OS command injection. A high-privileged attacker with remote access can exploit this during OS Repository processing to execute arbitrary commands as root.

Dell PowerFlex Manager versions prior to 5.1.0.1 contain an SQL Injection vulnerability due to improper neutralization of special elements used in SQL commands. A low-privileged attacker with remote access could exploit this flaw, leading to information disclosure, information exposure, and unauthorized access.

An SQL Injection vulnerability in Dell PowerFlex Manager prior to version 5.1.0.1 allows a low-privileged attacker with remote access to inject malicious SQL code, leading to information exposure.

Dell PowerFlex Manager versions prior to 5.1.0.1 contain an SQL Injection vulnerability due to improper neutralization of special elements used in SQL commands. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to script injection.

Dell PowerFlex Manager versions prior to 5.1.0.1 contain an SQL Injection vulnerability due to improper neutralization of special elements used in SQL commands. A low privileged attacker with adjacent network access could exploit this vulnerability, potentially leading to information disclosure.

A Host Header Injection vulnerability in Dell PowerFlex Manager prior to version 5.1.0.1 allows an unauthenticated attacker with remote access to manipulate host headers, potentially leading to redirections.

Dell PowerFlex Manager versions prior to 5.1.0.1 contain an Improper Authentication vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, and Unauthorized access.

Dell PowerFlex Manager versions prior to 5.1.0.1 contain a vulnerability related to the use of a broken or risky cryptographic algorithm. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to information disclosure and information tampering.

Dell PowerFlex Manager versions prior to 5.1.0.1 contain an Improper Access Control vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to denial of service.

Dell PowerFlex Manager versions prior to 5.1.0.1 contain an Improper Access Control vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Elevation of privileges and Unauthorized access.

Dell PowerFlex Manager versions prior to 5.1.0.1 contain an Improper Access Control vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to denial of service.

Dell PowerFlex Manager versions prior to 5.1.0.1 contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Code execution, Denial of service, Information disclosure, Information tampering, Remote execution, Script injection, and Unauthorized access.

Dell PowerFlex Manager versions prior to 5.1.0.1 contain an Improper Authentication vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Unauthorized access.

Dell PowerFlex Manager versions prior to 5.1.0.1 contain an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information disclosure.

Dell PowerFlex Manager, versions prior to 4.5.1.1, contain an improper certificate validation vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability leading to man-in-the-middle attack in tandem with DNS cache poisoning.

Dell PowerFlex Manager versions up to 4.6.2 contain a Use of a Broken or Risky Cryptographic Algorithm vulnerability in the SSH component. A low privileged attacker with local access can bypass protection mechanisms.

Dell PowerFlex Manager version 4.6.2 and below has an insecure storage of sensitive information vulnerability. A low-privileged attacker with local access can gain unauthorized access to sensitive data.

Vulnerability in Dell PowerFlex Manager versions up to 4.6.2. An unauthenticated remote attacker can access directory listing, leading to information exposure.

Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

Dell PowerFlex Manager version 4.6.2 and below has an insecure storage of sensitive information vulnerability. An unauthenticated attacker with local access can gain unauthorized access to sensitive data.

Dell PowerFlex Manager versions up to 4.6.2 have an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could tamper with information.

Dell PowerFlex Manager, versions 4.6.2 and prior, contains an Open Redirect Vulnerability. An unauthenticated attacker could exploit this to redirect a targeted application user to arbitrary web URLs.

Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Exposure of Information Through Directory Listing vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.