CVE-2025-43937 is a vulnerability in Dell PowerScale OneFS prior to version 9.12.0.0 involving the insertion of sensitive information into log files (CWE-532). A low privileged local attacker could exploit this to disclose user credentials logged by the system. The attacker could then use these credentials to access the application with the privileges of the compromised account. The CVSS 3.1 base score is 6.6, reflecting a medium severity with high confidentiality impact and high availability impact, requiring low privileges and user interaction for exploitation. No patch or official remediation level has been provided by Dell as of the published date.

The vulnerability allows disclosure of sensitive user credentials through log files, which can lead to unauthorized access to the Dell PowerScale OneFS application with the compromised account's privileges. This could result in confidentiality breaches and potential denial of service due to the high availability impact indicated by the CVSS score. However, exploitation requires local access with low privileges and user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local access to trusted users only and monitor for any unusual access patterns. Avoid exposing log files to unauthorized users. Follow Dell's official communications for updates on remediation.