Dell PowerProtect Data Manager Improper Neutralization Vulnerability in Reporting Component

A vulnerability has been identified in the Reporting component of Dell PowerProtect Data Manager versions 19.16, 19.17, and 19.18. This vulnerability arises from improper neutralization of special elements used in a template engine, potentially allowing a high-privileged attacker with local access to exploit it, leading to information disclosure.

Impact

Exploitation of this vulnerability could result in unauthorized information disclosure.

Remediation

Users can upgrade to Dell PowerProtect Data Manager version 19.19.0-15 or later to address this vulnerability.