Dell PowerProtect Data Domain Exposure of Sensitive Information Vulnerability

A vulnerability allowing the exposure of sensitive information to unauthorized actors exists in Dell PowerProtect Data Domain appliances running Data Domain Operating System (DD OS) versions 7.7.1.0 prior to 8.4.0.0, as well as in LTS2025 release version 8.3.1.10, LTS2024 release versions 7.13.1.0 through 7.13.1.40, and LTS2023 release versions 7.10.1.0 through 7.10.1.70. This vulnerability could be exploited by a high-privileged attacker with remote access, potentially leading to unauthorized information disclosure.

Impact

Exploitation of this vulnerability could result in unauthorized exposure of sensitive information.

Remediation

Users can upgrade to Dell PowerProtect Data Domain DD OS version 8.5.0.0 or later, version 8.3.1.20 or later, version 7.13.1.50 or later, or version 7.10.1.80 or later. For instructions on how to upgrade the Data Domain Operating System, see the Dell Knowledge Base article 'How to Upgrade the Data Domain Operating System'.