8.1
High
CVE-2020-5386 Dell EMC ECS, versions prior to 3.5, contains an Exposure of Resource vulnerability
Description
Dell EMC ECS, versions prior to 3.5, contains an Exposure of Resource vulnerability. A remote unauthenticated attacker can access the list of DT (Directory Table) objects of all internally running services and gain knowledge of sensitive data of the system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Elastic Cloud Storage 3.5 | earliest → < 3.5 | 3.5 |
Other CVEs of Elastic Cloud Storage
The 4 CVEs of Elastic Cloud Storage →
CVE-2026-28261
Dell Elastic Cloud Storage, version 3.8.1.7 and prior, and Dell ObjectScale, versions prior to 4.1.0.3 and version…
7.8
High
CVE-2020-5317
Dell EMC ECS versions prior to 3.4.0.1 contain an XSS vulnerability
6.2
Medium
CVE-2019-3766
Dell EMC ECS versions prior to 3.4.0.0 contain an improper restriction of excessive authentication attempts…
8.1
High