3.1Niedrig
CVE-2025-26478
Beschreibung
Dell ECS version 3.8.1.4 and prior contain an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure.
Schwachstellentyp (CWE):
CWE-295
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| Dell | ECS | N/A – < 4.0 | |
| dell | elastic cloud storage | ≤ 3.8.1.4 | |
| dell | objectscale | < 4.0.0.0 |
Referenzen und Patches
- https://www.dell.com/support/kbdoc/en-in/000300068/dsa-2025-097-security-update-for-dell-objectscale-4-0-mult… vendor-advisoryVendor Advisory
CPE-Treffer (NVD) (2)
cpe:2.3:a:dell:elastic_cloud_storage:*:*:*:*:*:*:*:*≤ 3.8.1.4cpe:2.3:a:dell:objectscale:*:*:*:*:*:*:*:*< 4.0.0.0