CVE-2020-5386 HIGH

CVE-2020-5386

Vendor Dell
Product Elastic Cloud Storage
Weakness CWE-668
Published September 2, 2020
Last update September 16, 2024

CVSS base score

8.1/10
Attack vector Network
Attack complexity High
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Dell EMC ECS, versions prior to 3.5, contains an Exposure of Resource vulnerability. A remote unauthenticated attacker can access the list of DT (Directory Table) objects of all internally running services and gain knowledge of sensitive data of the system.

Key dates

02Disclosure timeline

September 2, 2020 CVE published
September 16, 2024 Record updated