DSA-2024-276: Security Update for Dell Data Protection Central for Multiple Third-Party Component Vulnerabilities.
Summary: Dell Data Protection Central remediation is available for multiple third-party vulnerabilities that could be exploited by malicious users to compromise the affected system.
This article applies to
This article does not apply to
This article is not tied to any specific product.
Not all product versions are identified in this article.
Impact
Critical
Details
| Third-party Component | CVEs Addressed | More Information |
|---|---|---|
| Keycloak |
CVE-2022-1471, CVE-2022-45047, CVE-2022-42004, CVE-2022-42003, CVE-2022-3143, CVE-2023-24815, CVE-2023-0044, CVE-2022-41915, CVE-2022-41881, CVE-2023-21930, CVE-2023-4853, CVE-2023-2976, CVE-2023-5072 | See NVD for individual scores for each CVE: http://nvd.nist.gov/ |
| Postgres | CVE-2023-0464, CVE-2023-0401, CVE-2023-0217, CVE-2023-0216, CVE-2023-0215, CVE-2022-4450, CVE-2023-0286, CVE-2022-4304, CVE-2022-4203, CVE-2023-39417, CVE-2023-29491, CVE-2023-2454, CVE-2023-29469, CVE-2023-28484, CVE-2023-2650, CVE-2023-1255, CVE-2023-2455, CVE-2023-3817, CVE-2023-3446, CVE-2023-2975 , CVE-2023-0466 , CVE-2023-0465, CVE-2022-1304 | See NVD for individual scores for each CVE: http://nvd.nist.gov/ |
| Iam | CVE-2023-34062, CVE-2024-22243, CVE-2024-28085, CVE-2024-22257, CVE-2024-22259, CVE-2024-28182, CVE-2024-26461, CVE-2024-26458 | See NVD for individual scores for each CVE: http://nvd.nist.gov/ |
| Apache Tomcat | CVE-2023-46589 | https://nvd.nist.gov/vuln/detail/CVE-2023-46589 |
| Reactor Netty | CVE-2023-34054 | https://nvd.nist.gov/vuln/detail/CVE-2023-34054 |
Affected Products & Remediation
| Product | Software/Firmware | Affected Versions | Remediated Versions | Link |
|---|---|---|---|---|
| Dell Data Protection Central | Data Protection Central OS Update (SUSE SLES 12 SP5) | Version 19.10.0-4 and prior | Version 19.11.0-2 | Data Protection Central 19.11 |
| Product | Software/Firmware | Affected Versions | Remediated Versions | Link |
|---|---|---|---|---|
| Dell Data Protection Central | Data Protection Central OS Update (SUSE SLES 12 SP5) | Version 19.10.0-4 and prior | Version 19.11.0-2 | Data Protection Central 19.11 |
IDPA 2.7.6 and prior versions are impacted. Fix will be available in the upcoming IDPA release.
Platform: SUSE Linux Enterprise Server 12 SP5
See the latest ‘Dell Data Protection Central 19.11 Release Notes’ in Dell Data Protection Central 19.11 Release Notes | Dell US
Platform: SUSE Linux Enterprise Server 12 SP5
See the latest ‘Dell Data Protection Central 19.11 Release Notes’ in Dell Data Protection Central 19.11 Release Notes | Dell US
Revision History
| Revision | Date | Description |
|---|---|---|
| 1.0 | 2024-07-02 | Initial Release |
Related Information
Legal Disclaimer
Affected Products
Data Protection Central, Data Protection CentralArticle Properties
Article Number: 000226586
Article Type: Dell Security Advisory
Last Modified: 19 Sept 2025
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.