Skip to main content
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products
  • Manage your Dell EMC sites, products, and product-level contacts using Company Administration.

Article Number: 000215561


DSA-2023-246: Security Update for Dell Data Protection Central for Keycloak Vulnerabilities

Summary: Dell Data Protection Central remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.

Article Content


Impact

Critical

Details

Third-party Component CVEs More Information
keycloak CVE-2020-36518, CVE-2022-27404, CVE-2022-25314, CVE-2022-29824, CVE-2022-27406, CVE-2022-27405, CVE-2022-1586, CVE-2015-20107, CVE-2022-2068, CVE-2022-32206, CVE-2022-25313, CVE-2021-35939, CVE-2021-35938, CVE-2021-35937, CVE-2022-27782, CVE-2021-40528, CVE-2022-1304, CVE-2022-24823, CVE-2021-46822, CVE-2022-32208, CVE-2022-1292, CVE-2022-0391, CVE-2022-27774, CVE-2022-22576, CVE-2020-12401, CVE-2022-27776, CVE-2022-24823 See NVD link below for individual scores for each CVE 
https://nvd.nist.gov This hyperlink is taking you to a website outside of Dell Technologies.
Third-party Component CVEs More Information
keycloak CVE-2020-36518, CVE-2022-27404, CVE-2022-25314, CVE-2022-29824, CVE-2022-27406, CVE-2022-27405, CVE-2022-1586, CVE-2015-20107, CVE-2022-2068, CVE-2022-32206, CVE-2022-25313, CVE-2021-35939, CVE-2021-35938, CVE-2021-35937, CVE-2022-27782, CVE-2021-40528, CVE-2022-1304, CVE-2022-24823, CVE-2021-46822, CVE-2022-32208, CVE-2022-1292, CVE-2022-0391, CVE-2022-27774, CVE-2022-22576, CVE-2020-12401, CVE-2022-27776, CVE-2022-24823 See NVD link below for individual scores for each CVE 
https://nvd.nist.gov This hyperlink is taking you to a website outside of Dell Technologies.
Dell Technologies recommends all customers consider both the CVSS base score and any relevant temporal and environmental scores that may impact the potential severity associated with a particular security vulnerability.

Affected Products and Remediation

Product Affected Versions Remediated Versions Link
Dell Data Protection Central  Versions 19.7 and 19.8  19.9 https://www.dell.com/support/home/product-support/product/data-protection-central/drivers

 
Integrated Data Protection Appliance (PowerProtect DP Series) Versions 2.7.4 and prior 2.7.6 https://www.dell.com/support/home/product-support/product/integrated-data-protection-appliance/drivers
Product Affected Versions Remediated Versions Link
Dell Data Protection Central  Versions 19.7 and 19.8  19.9 https://www.dell.com/support/home/product-support/product/data-protection-central/drivers

 
Integrated Data Protection Appliance (PowerProtect DP Series) Versions 2.7.4 and prior 2.7.6 https://www.dell.com/support/home/product-support/product/integrated-data-protection-appliance/drivers

Revision History

RevisionDateDescription
1.02023-05-19Initial Release
2.02023-08-22Updated the third party component table
3.02024-03-18Updated Affected Products & Remediation section

Related Information


Article Properties


Product

Data Protection Central, PowerProtect Data Protection Appliance, PowerProtect Data Protection Software, Integrated Data Protection Appliance Family, PowerProtect Data Protection Hardware, Integrated Data Protection Appliance Software

Last Published Date

18 Mar 2024

Version

6

Article Type

Dell Security Advisory