Skip to content
Sign in
5.9 Medium

CVE-2022-31231 Dell ECS, versions 3.5 and 3.6, contain an Improper Access Control in the Identity and Access Management (IAM) module

Description

Dell ECS, versions 3.5 and 3.6, contain an Improper Access Control in the Identity and Access Management (IAM) module. A remote unauthenticated attacker may potentially exploit this vulnerability, leading to gaining read access to unauthorized data.

Affected products and versions

Product Affected versions Fixed in
ECS 3.6 earliest → < 3.6.2.4 3.6.2.4
ECS 3.5 earliest → < 3.5.1.7 3.5.1.7

Other CVEs of ECS

The 16 CVEs of ECS →
CVE-2026-26947 Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Improper… 6.7 Medium CVE-2026-26946 Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an improper privilege… 6.7 Medium CVE-2026-35157 Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an improper… 5.8 Medium CVE-2025-43992 Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an authentication… 5.6 Medium
Track this CVE