CVE Vulnerabilities

CVE-2025-38745

Insertion of Sensitive Information into Log File

Published: Aug 14, 2025 | Modified: Aug 19, 2025
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Dell OpenManage Enterprise, versions 3.10, 4.0, 4.1, and 4.2, contains an Insertion of Sensitive Information into Log File vulnerability in the Backup and Restore. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.

Weakness

The product writes sensitive information to a log file.

Affected Software

NameVendorStart VersionEnd Version
Openmanage_enterpriseDell3.10 (including)3.10 (including)
Openmanage_enterpriseDell4.0 (including)4.0 (including)
Openmanage_enterpriseDell4.1.0 (including)4.1.0 (including)
Openmanage_enterpriseDell4.2.0 (including)4.2.0 (including)

Potential Mitigations

References