Product:
PowerProtect Data Domain BoostFS
Summary
Dell PowerProtect Data Domain BoostFS for Linux Ubuntu systems contains an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to unauthorized access. This affects multiple feature release versions and LTS releases.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2025-43914 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the affected system. By leveraging their low privileges, the attacker can manipulate the system to gain unauthorized access, potentially compromising sensitive data and system integrity.
Affected Products
- Feature Release versions 7.7.1.0 through 8.3.0.15
- LTS2025 release version 8.3.1.0
- LTS2024 release versions 7.13.1.0 through 7.13.1.30
- LTS 2023 release versions 7.10.1.0 through 7.10.1.60
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Dell. Users should ensure that their systems are running the most recent versions of the affected software to reduce the risk of exploitation.