3.1Düşük
CVE-2025-26478
Açıklama
Dell ECS version 3.8.1.4 and prior contain an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure.
Zayıflık türü (CWE):
CWE-295
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| Dell | ECS | N/A – < 4.0 | |
| dell | elastic cloud storage | ≤ 3.8.1.4 | |
| dell | objectscale | < 4.0.0.0 |
Kaynaklar ve yamalar
- https://www.dell.com/support/kbdoc/en-in/000300068/dsa-2025-097-security-update-for-dell-objectscale-4-0-mult… vendor-advisoryVendor Advisory
CPE eşleşmeleri (NVD) (2)
cpe:2.3:a:dell:elastic_cloud_storage:*:*:*:*:*:*:*:*≤ 3.8.1.4cpe:2.3:a:dell:objectscale:*:*:*:*:*:*:*:*< 4.0.0.0