Description (CNA)
Dell Data Domain, versions prior to 7.13.0.0, LTS 7.7.5.30, LTS 7.10.1.20 contain an SQL Injection vulnerability. A local low privileged attacker could potentially exploit this vulnerability, leading to the execution of certain SQL commands on the application's backend database causing unauthorized access to application data.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Dell / PowerProtect DD | affected 7.0 through 7.13; affected 7.8 through 7.13 |
CWE
CWE-89
References
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.