The vulnerability in Dell PowerFlex Manager involves insecure storage of sensitive information, classified as CWE‑922. An attacker who gains low‑privileged local access can read or extract this data, potentially leading to a confidentiality breach. No remote code execution or denial of service conditions are described, so the primary impact is disclosure of protected information.

Affected products include Dell PowerFlex Manager, Dell PowerFlex Manager (Appliance), and Dell PowerFlex Manager (Rack) with versions up to and including 4.6.2. Any installation of these products that has not been updated beyond those versions is susceptible.

The CVSS score of 5.5 indicates moderate severity. Exploitation requires local low‑privileged access and no known public exploit stems from the EPSS data, which is unavailable; the vulnerability is not listed in CISA’s KEV catalog. The likely attack vector is local; an attacker would need to be inside the environment and possess user level rights to read the improperly stored information. While not critical, the potential for sensitive data exposure warrants timely remediation.