CyberRota Analysis
AI-GeneratedDell PowerProtect Data Manager versions prior to 20.2.0.0 are vulnerable to a security token generation flaw within the Identity and Access Management (IAM) system. This vulnerability allows a low-privileged attacker with remote access to escalate their privileges, potentially compromising the integrity and confidentiality of the system. Organizations using affected versions should prioritize remediation to mitigate the risk of unauthorized access and potential data breaches.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) a Generation of Incorrect Security Tokens vulnerability in the IAM. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
Related CVEs
Other vulnerabilities affecting the same vendor(s)