Description
Dell ECS, versions prior to 3.8.0, contain(s) a Host Header Injection Vulnerability. A remote low-privileged attacker could potentially exploit this vulnerability to trigger redirections that leads to sensitive information leakage.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Dell | ECS | N/A – < 3.8.0 | 3.8.0 |
Advisories 1
- WID-SEC-2024-3605 Dell ECS: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Dec 3, 2024