Description
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 8.4 through 8.5 contain a session fixation vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Dell | PowerProtect Data Domain | < 8.6.0.0 or later | 8.6.0.0 or later |
Advisories 1
- WID-SEC-2026-1118 Dell PowerProtect Data Domain OS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 5, 2026