Dell Data Protection Advisor Improper Neutralization of Template Engine Elements Vulnerability

A vulnerability exists in Dell Data Protection Advisor (DPA) versions prior to 19.12, related to improper neutralization of special elements used in a template engine within the server component. This vulnerability allows a low-privileged attacker with remote access to potentially exploit the issue, leading to information exposure.

Impact

Exploitation of this vulnerability could result in unauthorized information exposure.

Remediation

Users can upgrade to Dell Data Protection Advisor version 19.12 or later. For versions 19.11 and later, a script is available to remove affected OpenSSL 1.0.2 dependent libraries. This script can be obtained from Dell Customer Support.