CVE-2018-11052

Dell EMC ECS versions 3.2.0.0 and 3.2.0.1 contain an authentication bypass vulnerability. A remote unauthenticated attacker could exploit this vulnerability to read and modify S3 objects by supplying specially crafted S3 requests.

Score

CVSS 3.0 9.8 Critical

Status

Modified - security_alert@emc.com

Published

2018-07-03

Last modified

2024-09-17

Weaknesses

CWE-287

Affected products

• Ecs (Dell Emc)
• Elastic Cloud Storage (Dellemc)

References

• http://seclists.org/fulldisclosure/2018/Jul/1
• http://www.securityfocus.com/bid/104660