PowerProtect Cyber Recovery vulnerabilities
4 known vulnerabilities in PowerProtect Cyber Recovery from Dell. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.8 High severity
Power Protect Cyber Recovery: UNIX Symbolic Link (Symlink) Following
Dell PowerProtect Cyber Recovery, versions Prior to 20.3, contain an UNIX Symbolic Link (Symlink) Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Script injection.
- 8.8 High severity
Power Protect Cyber Recovery: Improper Authentication
Dell PowerProtect Cyber Recovery, versions prior to 20.3, contain an Improper Authentication vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
- 8.8 High severity
PowerProtect Cyber Recovery: Improper Neutralization of HTTP Headers for Scripting Syntax
Dell Power Protect Cyber Recovery, contains an Authentication Bypass vulnerability. An attacker could potentially exploit this vulnerability, leading to unauthorized admin access to the Cyber Recovery application. Exploitation may lead to complete system takeo
- 9.1 Critical severity
Cyber Recovery: Improper Authentication
Dell PowerProtect Cyber Recovery versions before 19.11.0.2 contain an authentication bypass vulnerability. A remote unauthenticated attacker may potentially access and interact with the docker registry API leading to an authentication bypass. The attacker may