Description
Dell ECS, versions prior to 3.8.1.3 contains an arithmetic overflow vulnerability exists in retention period handling of ECS. An authenticated user with bucket or object-level access and the necessary privileges could potentially exploit this vulnerability to bypass retention policies and delete objects.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Dell | ECS | N/A – < 3.8.1.3 | 3.8.1.3 |