← Back

CVE-2026-46467

nvd nist
Published: Jul 3, 2026Modified: Jul 8, 2026

JSON object

Loading...
5.8
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L
Exploitability: 1.0 / Impact: 4.7
Source: security_alert@emc.com (Secondary)

Description

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an insertion of sensitive information into log file vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information exposure.

Affected (3)

Dell
1 product
Data Domain Operating System
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Dell
Data Domain Operating System
From 7.7.1.0 to 7.13.1.70
Data Domain Operating System
From 8.0.0.0 to 8.3.1.30
Data Domain Operating System
From 8.4.0.0 to 8.7.0.0

Related CWEs

CWE-532
Insertion of Sensitive Information into Log File
Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.

References (1)

Source: security_alert@emc.com
Vendor Advisory

Timeline

No history available yet.