Plaintext Password Storage Vulnerability in Dell PowerProtect Data Manager

CVE-2025-43938

What is CVE-2025-43938?

A significant security concern has been identified in Dell PowerProtect Data Manager versions 19.19 and 19.20 concerning the storage of passwords in plaintext. This issue allows a high privileged attacker with local access to potentially expose user credentials. The compromised credentials can be used to gain unauthorized access, posing severe risks to data integrity and security. Organizations using affected versions should apply available updates promptly to mitigate potential threats.

References