Dell PowerProtect Data Domain BoostFS Incorrect Privilege Assignment Vulnerability

An incorrect privilege assignment vulnerability has been identified in Dell PowerProtect Data Domain BoostFS for Linux Ubuntu systems. This vulnerability affects Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, and LTS2023 release versions 7.10.1.0 through 7.10.1.60. A low privileged attacker with local access could exploit this vulnerability, potentially leading to unauthorized access.

Impact

Exploitation of this vulnerability could result in unauthorized access to the system.

Remediation

Users can upgrade to version 8.4.0.0 or later, version 8.3.1.10 or later, or version 7.13.1.40 or later, depending on their current version. Instructions for upgrading the Data Domain Operating System are available on the Dell Support website.