Dell Storage Manager - Replay Manager for Microsoft Servers, 版本(s) 8.0，存在权限管理不当 (Improper Privilege Management) 漏洞。低权限攻击者如果具有本地访问权限，可能可以利用该漏洞。

戴尔已识别出 Storage Manager - Replay Manager for Microsoft Servers 版本 8.0 中存在不当权限管理漏洞 (CVE-2026-23772)。该漏洞允许具有本地访问权限的低权限攻击者潜在地提升系统内的权限。潜在影响包括访问敏感数据、修改系统配置，甚至控制服务器。根据 CVSS 的评估，该漏洞的严重程度评分为 7.3。为了保护您的数据和系统，解决此漏洞至关重要。

Organizations heavily reliant on Dell Storage Manager - Replay Manager for Microsoft Servers to manage their storage infrastructure are at significant risk. Environments with lax access controls or limited physical security are particularly vulnerable. Shared hosting environments where multiple users share the same server could also be affected.

• linux / server:

journalctl -u dell-storage-manager | grep -i privilege
ps aux | grep -i replay_manager

• generic web: Check for unusual processes running with elevated privileges using ps aux and compare against known Dell Storage Manager processes.

1. 2026-04-16Disclosure

   disclosure

1. 已保留2026-01-16
2. 发布日期2026-04-16
3. 修改日期2026-04-17
4. EPSS 更新日期2026-04-23

戴尔强烈建议尽快将 Storage Manager - Replay Manager for Microsoft Servers 更新到 8.0.3 或更高版本。此更新包含必要的修复程序，以减轻不当权限管理漏洞。请在戴尔支持网站上检查更新的可用性，并遵循提供的安装说明。同时，限制对服务器的本地访问，并检查系统日志中是否存在可疑活动。及时打补丁对于维护基础设施安全至关重要。