Description
Dell ECS versions prior to 3.8.1.5/ ObjectScale version 4.0.0.0 contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Dell | ECS | NA – < 3.8.1.5 | 3.8.1.5 |
| Dell | ObjectScale | 4.0.0.0 – < 4.0.0.1 | 4.0.0.1 |
Advisories 1
- WID-SEC-2025-1682 Dell ECS: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Jul 30, 2025