Product:
PowerProtect Data Domain BoostFS
Summary
Dell PowerProtect Data Domain BoostFS for client of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.50, contain an insufficiently protected credentials vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to credential exposure. The attacker may be able to use the exposed credentials to access the system with privileges of the compromised account.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2025-36568 |
Exploitation
To exploit this vulnerability, an attacker with local access can leverage the insufficiently protected credentials to gain unauthorized access. By obtaining these credentials, the attacker can impersonate the compromised account and perform actions with the same privileges, potentially leading to further exploitation of the system.
Affected Products
- Feature Release versions 7.7.1.0 through 8.5
- LTS2025 release version 8.3.1.0 through 8.3.1.20
- LTS2024 release versions 7.13.1.0 through 7.13.1.50
Mitigation
To mitigate this vulnerability, it is recommended to update to the latest versions of the affected products where the credentials are adequately protected. Regularly review and manage access controls to limit local access to trusted users only.