Skip to content
Sign in
6.8 Medium

CVE-2024-22459 Dell ECS, versions 3.6 through 3.6.2.5, and 3.7 through 3.7.0.6, and 3.8 through 3.8.0.4 versions, contain an improper…

Description

Dell ECS, versions 3.6 through 3.6.2.5, and 3.7 through 3.7.0.6, and 3.8 through 3.8.0.4 versions, contain an improper access control vulnerability. A remote high privileged attacker could potentially exploit this vulnerability, leading to unauthorized access to all buckets and their data within a namespace

Affected products and versions

Product Affected versions Fixed in
ECS 3.8 3.8 → 3.8.0.4 No fix stated
ECS 3.7 3.7 → 3.7.0.6 No fix stated
ECS 3.6 3.6 → 3.6.2.5 No fix stated
elastic_cloud_storage 3.8 3.8 → 3.8.0.4 No fix stated
elastic_cloud_storage 3.7 3.7 → 3.7.0.6 No fix stated
elastic_cloud_storage 3.6 3.6 → 3.6.2.5 No fix stated

Other CVEs of ECS

The 16 CVEs of ECS →
CVE-2026-26947 Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Improper… 6.7 Medium CVE-2022-31231 Dell ECS, versions 3.5 and 3.6, contain an Improper Access Control in the Identity and Access Management (IAM) module 5.9 Medium CVE-2026-26946 Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an improper privilege… 6.7 Medium CVE-2026-35157 Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an improper… 5.8 Medium
Track this CVE