Dell PowerProtect Data Domain Operating System
Moderate fix6 remedies
cpe:2.3:o:dell:data_domain_operating_system:*:*:*:*:*:*:*
Moderate fix6 remedies
- >= 8.4, <= 8.5
Dell PowerProtect Data Domain Session Fixation Vulnerability Allowing Unauthorized Access
Vulnerability
Patched
A session fixation vulnerability has been identified in Dell PowerProtect Data Domain appliances running Data Domain Operating System (DD OS) Feature Release versions 8.4 through 8.5. This vulnerability allows a high-privileged attacker with remote access to exploit the issue, potentially leading to unauthorized access.
Impact
Exploitation of this vulnerability could result in unauthorized access to the affected system.
Remediation
Users can upgrade to Dell PowerProtect Data Domain DD OS version 8.6.1.10, 8.7.0.0 or later. Instructions for upgrading the Data Domain Operating System are available on the Dell Support website.
Added: Apr 17, 2026, 12:37 PM
Updated: Apr 17, 2026, 12:37 PM
Vulnerability Rating
Custom Algorithm
spread
4.5impact
5.0exploitability
4.4remediation
7.7relevance
5.8threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.