Vulnerability · Published Apr 11, 2023 · Assigned by dell
CVE-2023-28062
High 8.8
In plain English
A high-severity security flaw in PPDM Reporting (PowerProtect Data Manager) from Dell. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 56% of all known vulnerabilities).
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.8%top 44.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Dell PPDM versions 19.12, 19.11 and 19.10, contain an improper access control vulnerability. A remote authenticated malicious user with low privileges could potentially exploit this vulnerability to bypass intended access restrictions and perform unauthorized actions.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Dell | PPDM Reporting (PowerProtect Data Manager) | 19.10, 19.11 and 19.12 |
Weakness: CWE-648 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H