CVE-2023-44278

Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain a path traversal vulnerability. A local high privileged attacker could potentially exploit this vulnerability, to gain unauthorized read and write access to the OS files stored on the server filesystem, with the privileges of the running application.

Score

CVSS 3.1 6.7 Medium

Status

Modified - security_alert@emc.com

Published

2023-12-14

Last modified

2024-08-02

Weaknesses

CWE-22

Affected products

• Apex Protection Storage (Dell)
• Emc Data Domain Os (Dell)
• Powerprotect Data Domain (Dell)
• Powerprotect Data Domain Management Center (Dell)
• Powerprotect Data Protection (Dell)
• Powerprotect Dd (Dell)

References

• https://www.dell.com/support/kbdoc/en-us/000220264/dsa-2023-412-dell-technologies-powerprotect-security-update-for-mult…