PT-2025-41154 · Dell · Dell Powerprotect Data Domain Lts 2023+2

CVE-2025-43889

·

Publicado

2025-10-07

·

Atualizado

2025-10-07

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Dell PowerProtect Data Domain versions 7.7.1.0 through 8.4 Dell PowerProtect Data Domain LTS2024 release versions 7.13.1.0 through 7.13.1.30 Dell PowerProtect Data Domain LTS 2023 release versions 7.10.1.0 through 7.10.1.60
Description The software contains an Improper Limitation of a Pathname to a Restricted Directory issue, also known as a 'Path Traversal' condition, within the user interface. A remote, unauthenticated attacker could potentially exploit this issue, resulting in information disclosure.
Recommendations Update Dell PowerProtect Data Domain to a version later than 8.4. Update Dell PowerProtect Data Domain LTS2024 release to a version later than 7.13.1.30. Update Dell PowerProtect Data Domain LTS 2023 release to a version later than 7.10.1.60.

Correção

Path traversal

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

BDU:2025-12875
CVE-2025-43889

Produtos afetados

Dell Powerprotect Data Domain
Dell Powerprotect Data Domain Lts 2023
Dell Powerprotect Data Domain Lts2024