PT-2025-37059 · Dell · Dell Powerprotect Data Manager

Published 2025-04-18 · Updated 2025-10-20 · CVE-2025-43888

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Dell PowerProtect Data Manager versions 19.19 and 19.20

Description: Dell PowerProtect Data Manager, Hyper-V, versions 19.19 and 19.20 contain a vulnerability that allows the insertion of sensitive information into log files. A low-privileged attacker with local access could potentially exploit this issue, leading to unauthorized access.

Recommendations: For Dell PowerProtect Data Manager version 19.19, implement measures to restrict access to log files. For Dell PowerProtect Data Manager version 19.20, implement measures to restrict access to log files.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

BDU:2025-11425

CVE-2025-43888

Affected Products

Dell Powerprotect Data Manager

References · 8

• https://bdu.fstec.ru/vul/2025-11425 · Security Note
• https://osv.dev/vulnerability/CVE-2025-43888 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-43888 · Security Note
• https://dell.com/support/kbdoc/en-us/000367456/dsa-2025-326-security-update-for-dell-powerprotect-data-manager-multiple-security-vulnerabilities · Vendor Advisory
• https://twitter.com/CveFindCom/status/1965809805643116659 · Twitter Post
• https://t.me/cveNotify/139382 · Telegram Post
• https://twitter.com/CVEnew/status/1965813085979226240 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1965848018315284522 · Twitter Post