Avançar para o conteúdo principal
Terminar sessão

Damos-lhe as boas-vindas à Dell

Minha conta
  • Efetuar encomendas de forma rápida e fácil
  • Ver todas as encomendas e controlar o seu estado de expedição
  • Criar e aceder a uma lista dos seus produtos
  • Gerencie seus sites, produtos e contatos de nível de produto da Dell EMC usando o Company Administration.
Iniciar sessão Criar uma conta Início de sessão Premier Início de sessão no programa de parceiros
Contacte-nos

Número do artigo: 000153623

DSA-2020-099: Dell PowerProtect Data Manager Improper Authorization Vulnerability

Conteúdo do artigo

Impacto

High

Dados

Summary:    
Dell PowerProtect Data Manager contains remediation for a security vulnerability that may be exploited by malicious users to compromise the affected system.

Dell PowerProtect Data Manager (PPDM) versions prior to 19.4 and Dell PowerProtect X400 versions prior to 3.2 contain an improper authorization vulnerability. A remote authenticated malicious user may download any file from the affected PowerProtect virtual machines.

CVE-2020-5356
7.7(AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N)

For more information about any of the Common Vulnerabilities and Exposures (CVEs) mentioned here, consult the National Vulnerability Database (NVD) at http://nvd.nist.gov/home.cfm.  

To search for a CVE, use the database s search utility at http://web.nvd.nist.gov/view/vuln/search

Dell PowerProtect Data Manager (PPDM) versions prior to 19.4 and Dell PowerProtect X400 versions prior to 3.2 contain an improper authorization vulnerability. A remote authenticated malicious user may download any file from the affected PowerProtect virtual machines.

CVE-2020-5356
7.7(AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N)

For more information about any of the Common Vulnerabilities and Exposures (CVEs) mentioned here, consult the National Vulnerability Database (NVD) at http://nvd.nist.gov/home.cfm.  

To search for a CVE, use the database s search utility at http://web.nvd.nist.gov/view/vuln/search

A Dell Technologies recomenda que todos os clientes levem em consideração a pontuação base CVSS e as pontuações temporais e ambientais pertinentes que possam afetar a gravidade potencial associada a uma vulnerabilidade de segurança específica.

Produtos afetados e correção

Affected products:       
Dell PowerProtect Data Manager (PPDM) versions prior to 19.4
Dell PowerProtect X400 versions prior to 3.2


Remediation:    
The following Dell PowerProtect releases address this vulnerability:   

  • Dell PowerProtect Data Manager 19.4

  • Dell PowerProtect X400 version 3.2

Dell recommends all customers upgrade at the earliest opportunity. Contact Dell PowerProtect Data Manager Customer Support to download the required binary files and install it.



Affected products:       
Dell PowerProtect Data Manager (PPDM) versions prior to 19.4
Dell PowerProtect X400 versions prior to 3.2


Remediation:    
The following Dell PowerProtect releases address this vulnerability:   

  • Dell PowerProtect Data Manager 19.4

  • Dell PowerProtect X400 version 3.2

Dell recommends all customers upgrade at the earliest opportunity. Contact Dell PowerProtect Data Manager Customer Support to download the required binary files and install it.



Informações relacionadas

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

Informações legais

Propriedades do artigo

Produto afetado

PowerProtect Data Manager

Produto

PowerProtect Data Manager, PowerProtect X400 Appliance, Product Security Information

Data da última publicação

22 mai. 2021

Versão

4

Tipo de artigo

Dell Security Advisory

Voltar ao início