3.1Baja
CVE-2025-26478
Descripción
Dell ECS version 3.8.1.4 and prior contain an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure.
Debilidad (CWE):
CWE-295
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| Dell | ECS | N/A – < 4.0 | |
| dell | elastic cloud storage | ≤ 3.8.1.4 | |
| dell | objectscale | < 4.0.0.0 |
Referencias y parches
- https://www.dell.com/support/kbdoc/en-in/000300068/dsa-2025-097-security-update-for-dell-objectscale-4-0-mult… vendor-advisoryVendor Advisory
Coincidencias CPE (NVD) (2)
cpe:2.3:a:dell:elastic_cloud_storage:*:*:*:*:*:*:*:*≤ 3.8.1.4cpe:2.3:a:dell:objectscale:*:*:*:*:*:*:*:*< 4.0.0.0