← Back

CVE-2026-23777

nvd nist
Published: Apr 17, 2026Modified: Jun 17, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.50, contain an exposure of sensitive information to an unauthorized actor vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to information exposure.

Affected (3)

Dell
2 products
Data Domain Operating System
Powerprotect Data Domain
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Data Domain Operating System
From 7.7.1.0 to 8.5.0.0
Dell
Powerprotect Data Domain
From 7.13.1.0 to 7.13.1.50
Powerprotect Data Domain
From 8.3.1.0 to 8.3.1.20

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (1)

Source: security_alert@emc.com
Vendor Advisory

Timeline

No history available yet.