Dell PowerProtect Data Domain Path Traversal Vulnerability Allowing Information Exposure

A path traversal vulnerability has been identified in Dell PowerProtect Data Domain systems running Data Domain Operating System (DD OS) Feature Release versions 7.7.1.0 prior to 8.3.0.15, as well as LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, and LTS2023 release versions 7.10.1.0 through 7.10.1.60. This vulnerability allows low privileged attackers with remote access to potentially exploit the issue, leading to unauthorized information exposure.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive information.

Remediation

Users can upgrade to Dell PowerProtect Data Domain DD OS version 8.4.0.0 or later. Instructions for upgrading the Data Domain Operating System are available on the Dell Support website.