Description
Dell ECS, versions 3.6 through 3.6.2.5, and 3.7 through 3.7.0.6, and 3.8 through 3.8.0.4 versions, contain an improper access control vulnerability. A remote high privileged attacker could potentially exploit this vulnerability, leading to unauthorized access to all buckets and their data within a namespace
Metrics
CVSS 3.1 6.5/10
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:NWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Dell | ECS | >= 3.8, <= 3.8.0.4; >= 3.7, <= 3.7.0.6; >= 3.6, <= 3.6.2.5 |
| dell | elastic_cloud_storage | >= 3.8, <= 3.8.0.4; >= 3.7, <= 3.7.0.6; >= 3.6, <= 3.6.2.5 |
References
Timeline
- Published
- Feb 28, 2024
- Last modified
- Jun 17, 2026
- NVD status
- Analyzed