Powerprotect Data Protection CVE-2023-44278

This vulnerability is classified as Path Traversal (CWE-22), which allows attackers to access files and directories outside the intended path. Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain a path traversal vulnerability. A local high privileged attacker could potentially exploit this vulnerability, to gain unauthorized read and write access to the OS files stored on the server filesystem, with the privileges of the running application. Affected products include: Dell Powerprotect Data Protection, Dell Apex Protection Storage, Dell Powerprotect Data Domain, Dell Powerprotect Data Domain Management Center, Dell Emc Data Domain Os. Version information: prior to 7.13.0.10.