Dell Storage Center - Improper Restriction of XML External Entity Reference Vulnerability Allowing Information Disclosure and Tampering

A vulnerability has been identified in Dell Storage Center - Dell Storage Manager version 20.1.20, related to improper restriction of XML external entity references. This vulnerability could be exploited by an unauthenticated attacker with adjacent network access, potentially leading to unauthorized information disclosure and tampering.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive information and the ability to modify data within the application.

Remediation

Users are advised to update to version 2020 R1.21 or later. Instructions for downloading the update are available on the Dell Storage Center product support page.