High
Summary:
Dell PowerProtect Data Manager contains remediation for a security vulnerability that may be exploited by malicious users to compromise the affected system.
Dell PowerProtect Data Manager (PPDM) versions prior to 19.4 and Dell PowerProtect X400 versions prior to 3.2 contain an improper authorization vulnerability. A remote authenticated malicious user may download any file from the affected PowerProtect virtual machines.
CVE-2020-5356
7.7(AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N)
For more information about any of the Common Vulnerabilities and Exposures (CVEs) mentioned here, consult the National Vulnerability Database (NVD) at http://nvd.nist.gov/home.cfm.
To search for a CVE, use the database s search utility at http://web.nvd.nist.gov/view/vuln/search
Dell PowerProtect Data Manager (PPDM) versions prior to 19.4 and Dell PowerProtect X400 versions prior to 3.2 contain an improper authorization vulnerability. A remote authenticated malicious user may download any file from the affected PowerProtect virtual machines.
CVE-2020-5356
7.7(AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N)
For more information about any of the Common Vulnerabilities and Exposures (CVEs) mentioned here, consult the National Vulnerability Database (NVD) at http://nvd.nist.gov/home.cfm.
To search for a CVE, use the database s search utility at http://web.nvd.nist.gov/view/vuln/search
Affected products:
Dell PowerProtect Data Manager (PPDM) versions prior to 19.4
Dell PowerProtect X400 versions prior to 3.2
Remediation:
The following Dell PowerProtect releases address this vulnerability:
Dell PowerProtect Data Manager 19.4
Dell PowerProtect X400 version 3.2
Dell recommends all customers upgrade at the earliest opportunity. Contact Dell PowerProtect Data Manager Customer Support to download the required binary files and install it.
Affected products:
Dell PowerProtect Data Manager (PPDM) versions prior to 19.4
Dell PowerProtect X400 versions prior to 3.2
Remediation:
The following Dell PowerProtect releases address this vulnerability:
Dell PowerProtect Data Manager 19.4
Dell PowerProtect X400 version 3.2
Dell recommends all customers upgrade at the earliest opportunity. Contact Dell PowerProtect Data Manager Customer Support to download the required binary files and install it.