Dell PowerProtect Data Manager Incorrect Privilege Assignment Vulnerability Allowing Elevation of Privileges

A vulnerability allowing incorrect privilege assignment has been identified in Dell PowerProtect Data Manager versions prior to 19.22. A low privileged attacker with remote access could exploit this vulnerability, leading to unauthorized elevation of privileges.

Impact

Exploitation of this vulnerability could result in unauthorized elevation of privileges, allowing a low privileged attacker to gain higher-level access or rights within the application or system.

Remediation

Users can upgrade to Dell PowerProtect Data Manager version 19.22.0-24 or later. For more information, visit the Dell PowerProtect Data Manager Drivers & Downloads page.