Exposure of Resource Vulnerability in Dell EMC ECS Products
CVE-2020-5386

8.1HIGH

Key Information:

Vendor

Dell
Status
Elastic Cloud Storage
Vendor
CVE Published:
2 September 2020

What is CVE-2020-5386?

Dell EMC ECS versions prior to 3.5 are susceptible to an Exposure of Resource vulnerability, allowing remote unauthenticated attackers to gain access to the Directory Table (DT) objects of all internal services, potentially revealing sensitive information regarding the system's operations.

Affected Version(s)

Elastic Cloud Storage < 3.5

References

https://www.dell.com/support/security/en-us/details/54589...
x_refsource_MISC

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.