DSA-2024-413: Security Update for a Dell PowerFlex Manager Cleartext Storage of Sensitive Information Vulnerability

Dell PowerFlex Manager versions prior to 3.8.8 for RCM train 3.6.x, and versions prior to 4.6.0.1 for RCM trains 3.7.x and 3.8.x, contain a Cleartext Storage of Sensitive Information vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Information exposure and Elevation of privileges. This vulnerability is considered critical as it could allow an attacker to take administrative actions within Cloudlink and affect the encrypted storage devices stored in Cloudlink. Dell recommends that customers upgrade at the earliest opportunity. Installations not leveraging CloudLink are not affected by CVE-2024-47244.