6.8
Moyenne
CVE-2024-22459 Dell ECS, versions 3.6 through 3.6.2.5, and 3.7 through 3.7.0.6, and 3.8 through 3.8.0.4 versions, contain an improper…
Description
Dell ECS, versions 3.6 through 3.6.2.5, and 3.7 through 3.7.0.6, and 3.8 through 3.8.0.4 versions, contain an improper access control vulnerability. A remote high privileged attacker could potentially exploit this vulnerability, leading to unauthorized access to all buckets and their data within a namespace
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| ECS 3.8 | 3.8 → 3.8.0.4 | Pas de correctif indiqué |
| ECS 3.7 | 3.7 → 3.7.0.6 | Pas de correctif indiqué |
| ECS 3.6 | 3.6 → 3.6.2.5 | Pas de correctif indiqué |
| elastic_cloud_storage 3.8 | 3.8 → 3.8.0.4 | Pas de correctif indiqué |
| elastic_cloud_storage 3.7 | 3.7 → 3.7.0.6 | Pas de correctif indiqué |
| elastic_cloud_storage 3.6 | 3.6 → 3.6.2.5 | Pas de correctif indiqué |
Autres CVE de ECS
Les 16 CVE de ECS →
CVE-2026-26947
Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Improper…
6.7
Moyenne
CVE-2022-31231
Dell ECS, versions 3.5 and 3.6, contain an Improper Access Control in the Identity and Access Management (IAM) module
5.9
Moyenne
CVE-2026-26946
Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an improper privilege…
6.7
Moyenne
CVE-2026-35157
Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an improper…
5.8
Moyenne