PT-2025-37059

CVE-2025-43888

·

Published

2025-04-18

·

Updated

2025-10-20

Description by

CVSS 3.1
8.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: Dell PowerProtect Data Manager versions 19.19 and 19.20
Description: Dell PowerProtect Data Manager, Hyper-V, versions 19.19 and 19.20 contain a vulnerability that allows the insertion of sensitive information into log files. A low-privileged attacker with local access could potentially exploit this issue, leading to unauthorized access.
Recommendations: For Dell PowerProtect Data Manager version 19.19, implement measures to restrict access to log files. For Dell PowerProtect Data Manager version 19.20, implement measures to restrict access to log files.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾