CVE-2019-18576

CVE-2019-18576 is an information disclosure vulnerability affecting Dell EMC XtremIO XMS versions prior to 6.3.0, where OS user passwords are logged in local files. This allows malicious local users with access to these logs to compromise user credentials and gain unauthorized access with elevated privileges. Rated 6.7 MEDIUM on CVSS, the attack requires local access and high privileges, but if successful, can lead to high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage for this vulnerability.