PT-2025-37059
CVE-2025-43888
·
Published
2025-04-18
·
Updated
2025-10-20
Description by
CVSS 3.1
8.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Dell PowerProtect Data Manager versions 19.19 and 19.20
Description:
Dell PowerProtect Data Manager, Hyper-V, versions 19.19 and 19.20 contain a vulnerability that allows the insertion of sensitive information into log files. A low-privileged attacker with local access could potentially exploit this issue, leading to unauthorized access.
Recommendations:
For Dell PowerProtect Data Manager version 19.19, implement measures to restrict access to log files.
For Dell PowerProtect Data Manager version 19.20, implement measures to restrict access to log files.
Found an issue in the description? Have something to add? Feel free to write us 👾