CVE-2023-44278Path Traversal in Dell Apex Protection Storage

CWE-22Path Traversal3 documents3 sources
Severity
6.7MEDIUMNVD
EPSS
0.1%
top 76.47%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedDec 14

Description

Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain a path traversal vulnerability. A local high privileged attacker could potentially exploit this vulnerability, to gain unauthorized read and write access to the OS files stored on the server filesystem, with the privileges of the running application.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 0.8 | Impact: 5.9

Affected Packages6 packages

NVDdell/powerprotect_data_domain7.07.12.0.0+1
CVEListV5dell/powerprotect_ddVersions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110
NVDdell/emc_data_domain_os7.07.12.0.0+3

🔴Vulnerability Details

2
GHSA
GHSA-9gm2-f3j7-6vj6: Dell PowerProtect DD , versions prior to 72023-12-14
CVEList
CVE-2023-44278: Dell PowerProtect DD , versions prior to 72023-12-14
CVE-2023-44278 — Path Traversal in Dell | cvebase