Description
Dell ECS, versions 3.6 through 3.6.2.5, and 3.7 through 3.7.0.6, and 3.8 through 3.8.0.4 versions, contain an improper access control vulnerability. A remote high privileged attacker could potentially exploit this vulnerability, leading to unauthorized access to all buckets and their data within a namespace
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Dell | ECS | 3.8 – ≤ 3.8.0.4, 3.7 – ≤ 3.7.0.6, 3.6 – ≤ 3.6.2.5 | — |
Advisories 1
- WID-SEC-2024-0480 Dell Storage: Schwachstelle ermöglicht Umgehung von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Feb 26, 2024