medium6.8
CVE-2024-22459
Dell ECS, versions 3.6 through 3.6.2.5, and 3.7 through 3.7.0.6, and 3.8 through 3.8.0.4 versions, contain an improper access control vulnerability.
Impact
Dell ECS, versions 3.6 through 3.6.2.5, and 3.7 through 3.7.0.6, and 3.8 through 3.8.0.4 versions, contain an improper access control vulnerability. A remote high privileged attacker could potentially exploit this vulnerability, leading to unauthorized access to all buckets and their data within a namespace
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Elastic Cloud Storage | from 3.6.0.0 before 3.6.2.6 from 3.7.0.0 before 3.7.0.7 from 3.8.0.0 before 3.8.0.5 |