Orta CVSS 5.6
CVE-2025-43992: Elastic Cloud Storage: güvenlik açığı
Açıklama (NVD)
Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an authentication bypass by assumed-immutable data vulnerability in Geo replication. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access to data in transit.
Özet bilgiler
- Ürün
- Dell Elastic Cloud Storage
- CVSS v3.1
- 5.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L - EPSS
- %0,24 (yüzdelik 15)
- CWE
- CWE-302
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| dell-elastic-cloud-storage | 3.8.1.0 | — | 4.3.0.0 |
| dell-objectscale | — | — | 4.3.0.0 |