DSA-2025-138: Security Update for Dell Data Protection Central for Third-Party Component Vulnerabilities
Summary: Dell Data Protection Central remediation is available for multiple third-party vulnerabilities that could be exploited by malicious users to compromise the affected system.
This article applies to
This article does not apply to
This article is not tied to any specific product.
Not all product versions are identified in this article.
Impact
Critical
Additional Details
This Security Advisory applies to Data Protection Central, Versions prior 19.9.0 through 19.11.0-2.
Details
|
Third-party Component |
CVEs |
More Information |
|---|---|---|
|
Keycloak |
CVE-2024-3656, CVE-2024-1132, CVE-2024-4540, CVE-2024-1249, CVE-2024-2419, CVE-2024-2700, CVE-2024-8698, CVE-2024-47554, CVE-2024-7341, CVE-2024-8883 |
|
|
Iam |
CVE-2024-37370, CVE-2024-21147, CVE-2023-52428 |
|
|
Postgres |
CVE-2024-25062 |
|
|
Akk-actoer |
CVE-2023-31442 |
|
|
Elliptic |
CVE-2024-42461 |
|
|
Socket.IO Parser |
CVE-2023-32695 |
Affected Products & Remediation
|
Product |
Software/Firmware |
Affected Versions |
Remediated Versions |
Link |
|---|---|---|---|---|
|
Data Protection Central |
DPC_19.12 |
Versions 19.9.0 through 19.11.0-2 |
Version 19.12.0-2 or later |
|
Product |
Software/Firmware |
Affected Versions |
Remediated Versions |
Link |
|---|---|---|---|---|
|
Data Protection Central |
DPC_19.12 |
Versions 19.9.0 through 19.11.0-2 |
Version 19.12.0-2 or later |
Note:
- Platform: SUSE Linux Enterprise Server 12 SP5
- See the latest Dell Data Protection Central 19.12 Release Notes
Revision History
|
Revision |
Date |
Description |
|
1.0 |
2025-03-20 |
Initial Release |
Related Information
Legal Disclaimer
Affected Products
Data Protection Central, Data Protection Suite SeriesArticle Properties
Article Number: 000297536
Article Type: Dell Security Advisory
Last Modified: 20 Mar 2025
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.