CVE-2024-29177: Low severity Dell Data Domain Operating System vulnerability
Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain a disclosure of temporary sensitive information vulnerability. A remote high privileged attacker could potentially exploit this vulnerability, leading to the reuse of disclosed information to gain unauthorized access to the application report.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell PowerProtect DDto a version that resolves this vulnerability.Fixed in 8.0
Event History
Frequently Asked Questions
What is the severity of CVE-2024-29177?
CVE-2024-29177 is classified as a high severity vulnerability due to its potential for exploitation by remote high-privileged attackers.
How do I fix CVE-2024-29177?
To fix CVE-2024-29177, update Dell PowerProtect DD to version 8.0 or the applicable LTS versions 7.13.1.0, 7.10.1.30, or 7.7.5.40.
What types of systems are affected by CVE-2024-29177?
CVE-2024-29177 affects Dell Data Domain Operating Systems prior to versions 8.0, LTS 7.13.1.0, LTS 7.10.1.30, and LTS 7.7.5.40.
What can an attacker do if they exploit CVE-2024-29177?
An attacker exploiting CVE-2024-29177 could potentially reuse disclosed temporary sensitive information to gain unauthorized access.
Is there a workaround for CVE-2024-29177?
Currently, the recommended mitigation for CVE-2024-29177 is to upgrade to a patched version, as no official workaround is provided.