Dell PowerProtect Data Domain Exposure of Sensitive Information Vulnerability

A vulnerability has been identified in Dell PowerProtect Data Domain appliances running Data Domain Operating System (DD OS) versions 7.7.1.0 through 8.5, LTS2025 release versions 8.3.1.0 through 8.3.1.20, and LTS2024 release versions 7.13.1.0 through 7.13.1.50. This vulnerability allows a low privileged attacker with remote access to expose sensitive information to an unauthorized actor.

Impact

Exploitation of this vulnerability could lead to unauthorized information exposure.

Remediation

Users can upgrade to Dell PowerProtect Data Domain versions 8.6.1.10, 8.7.0.0 or later, or for LTS2024 release versions 7.13.1.70 or later. Instructions for upgrading the Data Domain Operating System are available on the Dell Support website.