medium6.7
CVE-2023-44278
Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain a path traversal vulnerability.
Impact
Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain a path traversal vulnerability. A local high privileged attacker could potentially exploit this vulnerability, to gain unauthorized read and write access to the OS files stored on the server filesystem, with the privileges of the running application.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Powerprotect Data Protection | before 2.7.6 |
| Dell | Apex Protection Storage | before 6.2.1.110 from 7.0 before 7.10.1.15 |
| Dell | Powerprotect Data Domain | before 6.2.1.110 from 7.0 before 7.12.0.0 |
| Dell | Powerprotect Data Domain Management Center | before 6.2.1.110 from 7.0 before 7.13.0.10 from 7.7 before 7.7.5.25 from 7.10 before 7.10.1.15 |
| Dell | Emc Data Domain Os | before 6.2.1.110 from 7.0 before 7.12.0.0 from 7.7 before 7.7.5.25 from 7.10 before 7.10.1.15 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.dell.com/support/kbdoc/en-us/000220264/dsa-2023-412-dell-technologies-powerprotect-security-update-for-multiple-security-vulnerabilities
- https://www.dell.com/support/kbdoc/en-us/000220264/dsa-2023-412-dell-technologies-powerprotect-security-update-for-multiple-security-vulnerabilities