Path traversal

2023-12-1416:15:00

PRIOn knowledge base

www.prio-n.com

dell powerprotect dd

path traversal

vulnerability

unauthorized access

os files

server filesystem

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.6%

JSON

Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain a path traversal vulnerability. A local high privileged attacker could potentially exploit this vulnerability, to gain unauthorized read and write access to the OS files stored on the server filesystem, with the privileges of the running application.

CPENameOperatorVersion
apex_protection_storagelt6.2.1.110
apex_protection_storagege7.0
apex_protection_storagelt7.10.1.15
emc_data_domain_oslt6.2.1.110
emc_data_domain_osge7.0
emc_data_domain_oslt7.12.0.0
emc_data_domain_osge7.7
emc_data_domain_oslt7.7.5.25
emc_data_domain_osge7.10
emc_data_domain_oslt7.10.1.15

Name	Operator	Version
apex_protection_storage	lt	6.2.1.110
apex_protection_storage	ge	7.0
apex_protection_storage	lt	7.10.1.15
emc_data_domain_os	lt	6.2.1.110
emc_data_domain_os	ge	7.0
emc_data_domain_os	lt	7.12.0.0
emc_data_domain_os	ge	7.7
emc_data_domain_os	lt	7.7.5.25
emc_data_domain_os	ge	7.10
emc_data_domain_os	lt	7.10.1.15