9.8
Critical
CVE-2018-11052 Dell EMC ECS versions 3.2.0.0 and 3.2.0.1 contain an authentication bypass vulnerability
Description
Dell EMC ECS versions 3.2.0.0 and 3.2.0.1 contain an authentication bypass vulnerability. A remote unauthenticated attacker could exploit this vulnerability to read and modify S3 objects by supplying specially crafted S3 requests.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ECS 3.2 | 3.2.0.0 → 3.2.0.1 | No fix stated |