Skip to main content
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Create and access a list of your products
  • Manage your Dell EMC sites, products, and product-level contacts using Company Administration.

Article Number: 000153623


DSA-2020-099: Dell PowerProtect Data Manager Improper Authorization Vulnerability

Article Content


Impact

High

Details

Summary:    
Dell PowerProtect Data Manager contains remediation for a security vulnerability that may be exploited by malicious users to compromise the affected system.

Dell PowerProtect Data Manager (PPDM) versions prior to 19.4 and Dell PowerProtect X400 versions prior to 3.2 contain an improper authorization vulnerability. A remote authenticated malicious user may download any file from the affected PowerProtect virtual machines.

CVE-2020-5356
7.7(AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N)

For more information about any of the Common Vulnerabilities and Exposures (CVEs) mentioned here, consult the National Vulnerability Database (NVD) at http://nvd.nist.gov/home.cfm.  

To search for a CVE, use the database s search utility at http://web.nvd.nist.gov/view/vuln/search

Dell PowerProtect Data Manager (PPDM) versions prior to 19.4 and Dell PowerProtect X400 versions prior to 3.2 contain an improper authorization vulnerability. A remote authenticated malicious user may download any file from the affected PowerProtect virtual machines.

CVE-2020-5356
7.7(AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N)

For more information about any of the Common Vulnerabilities and Exposures (CVEs) mentioned here, consult the National Vulnerability Database (NVD) at http://nvd.nist.gov/home.cfm.  

To search for a CVE, use the database s search utility at http://web.nvd.nist.gov/view/vuln/search

Dell Technologies recommends all customers consider both the CVSS base score and any relevant temporal and environmental scores that may impact the potential severity associated with a particular security vulnerability.

Affected Products and Remediation

Affected products:       
Dell PowerProtect Data Manager (PPDM) versions prior to 19.4
Dell PowerProtect X400 versions prior to 3.2


Remediation:    
The following Dell PowerProtect releases address this vulnerability:   

  • Dell PowerProtect Data Manager 19.4

  • Dell PowerProtect X400 version 3.2

Dell recommends all customers upgrade at the earliest opportunity. Contact Dell PowerProtect Data Manager Customer Support to download the required binary files and install it.



Affected products:       
Dell PowerProtect Data Manager (PPDM) versions prior to 19.4
Dell PowerProtect X400 versions prior to 3.2


Remediation:    
The following Dell PowerProtect releases address this vulnerability:   

  • Dell PowerProtect Data Manager 19.4

  • Dell PowerProtect X400 version 3.2

Dell recommends all customers upgrade at the earliest opportunity. Contact Dell PowerProtect Data Manager Customer Support to download the required binary files and install it.



Related Information


Article Properties


Affected Product

PowerProtect Data Manager

Product

PowerProtect Data Manager, PowerProtect X400 Appliance, Product Security Information

Last Published Date

22 May 2021

Version

4

Article Type

Dell Security Advisory