CVE-2026-91872: Medium severity vulnerability
Dell Ansible Storage for PowerStore, versions prior to 3.9.0,contains an Insertion of Sensitive Information into Log File vulnerability in the configuration module. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information exposure.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell Ansible Storage for PowerStoreto a version that resolves this vulnerability.Fixed in 3.9.0
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Systems using Dell Ansible Storage for PowerStore versions earlier than 3.9.0 are affected. Exploitation requires local access and a low-privileged account.
What could an attacker gain through exploitation?
A successful attacker could cause sensitive information to be written to log files, resulting in information exposure. The supplied severity vector indicates no integrity or availability impact.
What version resolves the issue?
Update Dell Ansible Storage for PowerStore to version 3.9.0 or later.