CVE-2024-48010
Dell PowerProtect DD, versions prior to 8.1.0.0, 7.13.1.10, 7.10.1.40, and 7.7.5.50, contains an access control vulnerability. A remote high privileged attacker could potentially exploit this vulnerability, leading to escalation of privilege on the application.
- Score
- CVSS 3.1 7.2 High
- Status
- Analyzed - security_alert@emc.com
- Published
- 2024-11-08
- Last modified
- 2024-11-08
- Weaknesses
- CWE-284
Affected products
- Apex Protection Storage (Dell)
- Data Domain Operating System (Dell)
- Emc Data Domain Os (Dell)
- Powerprotect Data Domain (Dell)
- Powerprotect Data Domain Management Center (Dell)
- Powerprotect Dd (Dell)
References
- https://www.dell.com/support/kbdoc/en-us/000245360/dsa-2024-424-security-update-for-dell-pdsa-2024-424-security-update-…
