Description
Dell XtremIO X2 XMS versions prior to 6-4-1.11 contain an improper access control vulnerability. A remote read only user could potentially exploit this vulnerability to perform add/delete QoS policies which are disabled by default.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Dell | XtremIO X2 | All releases prior to 6.4.1-11 | — |