Dell PowerProtect Data Manager Improper Verification of Communication Source Vulnerability in REST API

A vulnerability exists in Dell PowerProtect Data Manager versions prior to 19.22, allowing high-privileged attackers with remote access to exploit improper verification of the communication channel source in the REST API. This could lead to bypassing protection mechanisms.

Impact

Exploitation of this vulnerability could allow an attacker to bypass security mechanisms, potentially leading to unauthorized actions or access within the application.

Remediation

Users can upgrade to Dell PowerProtect Data Manager version 19.22.0-24 or later. For more information, visit the Dell PowerProtect Data Manager Drivers & Downloads page.