CVE-2020-5356 — Dell / Power Protect Data Manager

Description (CNA)

Dell PowerProtect Data Manager (PPDM) versions prior to 19.4 and Dell PowerProtect X400 versions prior to 3.2 contain an improper authorization vulnerability. A remote authenticated malicious user may download any file from the affected PowerProtect virtual machines.

Affected (CNA)

Vendor / product	Versions
Dell / Power Protect Data Manager	affected unspecified before PowerProtect Data Manager version 19.5

CWE

CWE-285

References

https://www.dell.com/support/security/en-us/details/544733/DSA-2020-099-Dell-PowerProtect-Data-Manager-Improper-Authorization-Vulnerability

ADP enrichment

CVE

No English description supplied.

https://www.dell.com/support/security/en-us/details/544733/DSA-2020-099-Dell-PowerProtect-Data-Manager-Improper-Authorization-Vulnerability