{"id":"CVE-2026-116431","kind":"vulnerability","aliases":["CVE-2026-116431"],"related":[],"title":"Dell PowerScale InsightIQ: cleartext storage exposes sensitive data to low-privileged users","description":"Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains a Cleartext Storage of Sensitive Information vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.","summary":"Dell PowerScale InsightIQ versions 6.3.0 through 6.4.0 store some sensitive information in cleartext. A low-privileged attacker with remote access could read that information.","severity":"medium","cvss":4.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["dell","infrastructure","insightiq","powerscale"],"not_affected_if":["outside-affected-versions"],"how_to_check":"- Check the installed InsightIQ version against the affected range `6.3.0` through `6.4.0`","fix":null,"status":"open","published_at":"2026-11-13T09:17:33+00:00","first_seen_at":"2026-11-13T09:49:53+00:00","triaged_at":"2026-11-13T09:52:10+00:00","updated_at":"2026-11-13T09:52:10+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-11-13T09:52:10Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Dell PowerScale InsightIQ: cleartext storage exposes sensitive data to low-privileged users","impact":"low","summary":"Dell PowerScale InsightIQ versions 6.3.0 through 6.4.0 store some sensitive information in cleartext. A low-privileged attacker with remote access could read that information.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["dell","powerscale","insightiq"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"low-privileged remote user reads sensitive information stored in cleartext","analyst_note":"Check Dell's security advisory for the fixed version and which sensitive data is stored in cleartext; only NVD was provided.","how_to_check":"- Check the installed InsightIQ version against the affected range `6.3.0` through `6.4.0`\n- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["outside-affected-versions"],"who_is_affected":"Organizations running Dell PowerScale InsightIQ in the affected version range 6.3.0 through 6.4.0 are exposed. The sources do not say which configuration or data is stored in cleartext, so teams should check what sensitive data their InsightIQ deployment holds.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000706,"input_tokens":4563,"output_tokens":500,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-116431':16A,19A '-2026':15A,18A '6.3.0':28B,53C '6.4.0':30B,55C 'access':44B,70C 'attack':41B,67C 'cleartext':4A,36B,58C 'contain':56C 'could':45B,71C 'cve':14A,17A 'data':8A 'dell':1A,20B,24B,49C 'disclosur':79C 'exploit':73C 'expos':6A 'inform':34B,48B,62C,78C 'infrastructur':21B 'insightiq':3A,22B,26B,51C 'lead':76C 'low':11A,39B,65C 'low-privileg':10A,38B 'potenti':72C 'powerscal':2A,23B,25B,50C 'privileg':12A,40B,66C 'read':46B 'remot':43B,69C 'sensit':7A,33B,61C 'storag':5A,59C 'store':31B 'user':13A 'version':27B,52C 'vulner':63C,75C","nicknames":[],"mitigations":[],"who_affected":"Organizations running Dell PowerScale InsightIQ in the affected version range 6.3.0 through 6.4.0 are exposed. The sources do not say which configuration or data is stored in cleartext, so teams should check what sensitive data their InsightIQ deployment holds.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["dell","infrastructure","insightiq","medium","powerscale"],"campaign_type":null,"search_a":"'-116431':16A,19A '-2026':15A,18A 'cleartext':4A 'cve':14A,17A 'data':8A 'dell':1A 'expos':6A 'insightiq':3A 'low':11A 'low-privileg':10A 'powerscal':2A 'privileg':12A 'sensit':7A 'storag':5A 'user':13A","search_b":"'6.3.0':28B '6.4.0':30B 'access':44B 'attack':41B 'cleartext':36B 'could':45B 'dell':20B,24B 'inform':34B,48B 'infrastructur':21B 'insightiq':22B,26B 'low':39B 'low-privileg':38B 'powerscal':23B,25B 'privileg':40B 'read':46B 'remot':43B 'sensit':33B 'store':31B 'version':27B","search_c":"'6.3.0':53C '6.4.0':55C 'access':70C 'attack':67C 'cleartext':58C 'contain':56C 'could':71C 'dell':49C 'disclosur':79C 'exploit':73C 'inform':62C,78C 'insightiq':51C 'lead':76C 'low':65C 'potenti':72C 'powerscal':50C 'privileg':66C 'remot':69C 'sensit':61C 'storag':59C 'version':52C 'vulner':63C,75C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-13T09:17:33+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss_by":"security_alert@emc.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-116431","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-116431","severity":null,"published_at":"2026-11-13T09:17:33+00:00","modified_at":"2026-11-13T09:17:33+00:00","first_seen_at":"2026-11-13T09:49:53+00:00","fetched_at":"2026-11-13T09:49:53+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}