CVE-2018-11052

Published: Jul 3, 2018Modified: Nov 21, 2024

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Dell EMC ECS versions 3.2.0.0 and 3.2.0.1 contain an authentication bypass vulnerability. A remote unauthenticated attacker could exploit this vulnerability to read and modify S3 objects by supplying specially crafted S3 requests.

Affected (2)

Products: Dellemc: Elastic Cloud Storage

Dellemc

1 product

Elastic Cloud Storage

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Dellemc Elastic Cloud Storage	Version 3.2.0.0
Dellemc Elastic Cloud Storage	Version 3.2.0.1

Related CWEs

CWE-287

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (4)

http://seclists.org/fulldisclosure/2018/Jul/1

Source: security_alert@emc.com

Mailing ListThird Party Advisory

http://www.securityfocus.com/bid/104660

Source: security_alert@emc.com

Third Party AdvisoryVDB Entry

http://seclists.org/fulldisclosure/2018/Jul/1

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://www.securityfocus.com/bid/104660

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

Timeline

No history available yet.