medium5.6
CVE-2025-43992
Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an authentication bypass by assumed-immutable data vulnerabi…
Impact
Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an authentication bypass by assumed-immutable data vulnerability in Geo replication. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access to data in transit.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Elastic Cloud Storage | from 3.8.1.0 before 4.3.0.0 |
| Dell | Objectscale | before 4.3.0.0 |