Product:
PowerProtect Data Domain
Summary
Dell PowerProtect Data Domain with Data Domain Operating System contains a vulnerability that exposes sensitive information to unauthorized actors. A high privileged attacker with remote access could exploit this vulnerability, leading to information disclosure. This issue affects multiple feature release versions and LTS releases.
Details
| Severity | Base Score | CVE |
|---|---|---|
| LOW | 2.7 | CVE-2025-46676 |
Exploitation
To exploit this vulnerability, an attacker must have high privileges and remote access to the affected system. By leveraging these access rights, the attacker can potentially gain unauthorized access to sensitive information stored within the system, leading to data breaches.
Affected Products
- Feature Release versions 7.7.1.0 through 8.4.0.0
- LTS2025 release version 8.3.1.10
- LTS2024 release versions 7.13.1.0 through 7.13.1.40
- LTS2023 release versions 7.10.1.0 through 7.10.1.70
Mitigation
To mitigate this vulnerability, it is recommended that users apply the latest security updates provided by Dell. Ensuring that systems are regularly updated and that access controls are strictly enforced can help prevent unauthorized access and protect sensitive information.