CVE-2023-28062

Dell PPDM versions 19.12, 19.11 and 19.10, contain an improper access control vulnerability. A remote authenticated malicious user with low privileges could potentially exploit this vulnerability to bypass intended access restrictions and perform unauthorized actions.

Score

CVSS 3.1 8.8 High

Status

Modified - security_alert@emc.com

Published

2023-04-11

Last modified

2025-02-07

Weaknesses

CWE-648

Affected products

• Powerprotect Data Manager (Dell)
• Ppdm Reporting Powerprotect Data Manager (Dell)

References

• https://www.dell.com/support/kbdoc/en-us/000212242/dsa-2023-137-dell-powerprotect-data-manager-security-update-for-prop…