CVE-2024-37141

Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain an open redirect vulnerability. A remote low privileged attacker could potentially exploit this vulnerability, leading to information disclosure.

Score

CVSS 3.1 3.5 Low

Status

Modified - security_alert@emc.com

Published

2024-06-26

Last modified

2024-08-02

Weaknesses

CWE-601

Affected products

• Data Domain Operating System (Dell)
• Powerprotect Dd (Dell)

References

• https://www.dell.com/support/kbdoc/en-us/000226148/dsa-2024-219-dell-technologies-powerprotect-dd-security-update-for-m…