CVE-2020-5386

8.1HIGH

Key Information:

Vendor
Dell
Status
Elastic Cloud Storage
Vendor
CVE Published:
2 September 2020

Summary

Dell EMC ECS, versions prior to 3.5, contains an Exposure of Resource vulnerability. A remote unauthenticated attacker can access the list of DT (Directory Table) objects of all internally running services and gain knowledge of sensitive data of the system.

Affected Version(s)

Elastic Cloud Storage < 3.5

References

https://www.dell.com/support/security/en-us/details/54589...
x_refsource_MISC

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.