6.5
Medium
CVE-2024-24908 Dell PowerProtect DM5500 version 5.15.0.0 and prior contain an Arbitrary File Delete via Path Traversal vulnerability
Description
Dell PowerProtect DM5500 version 5.15.0.0 and prior contain an Arbitrary File Delete via Path Traversal vulnerability. A remote attacker with high privileges could potentially exploit this vulnerability to deletion of arbitrary files stored on the server filesystem.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Data Manager Appliance Software (DMAS) 5.15 | earliest → 5.15 | No fix stated |
| dm5500 5.15 | earliest → 5.15.0.0 | No fix stated |