medium5.9
CVE-2022-31231
Dell ECS, versions 3.5 and 3.6, contain an Improper Access Control in the Identity and Access Management (IAM) module.
Impact
Dell ECS, versions 3.5 and 3.6, contain an Improper Access Control in the Identity and Access Management (IAM) module. A remote unauthenticated attacker may potentially exploit this vulnerability, leading to gaining read access to unauthorized data.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Elastic Cloud Storage | before 3.5.1.7 from 3.6.0.0 before 3.6.2.4 |