← Back

CVE-2025-43992

nvd nist
Published: May 11, 2026Modified: Jun 17, 2026

JSON object

Loading...
5.6
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Exploitability: 2.2 / Impact: 3.4
Source: security_alert@emc.com (Secondary)

Description

Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an authentication bypass by assumed-immutable data vulnerability in Geo replication. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access to data in transit.

Affected (2)

Dell
2 products
Elastic Cloud Storage
Objectscale
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Elastic Cloud Storage
From 3.8.1.0 to 4.3.0.0
Objectscale
Before 4.3.0.0

Related CWEs

CWE-302
Authentication Bypass by Assumed-Immutable Data
The authentication scheme or implementation uses key data elements that are assumed to be immutable, but can be controlled or modified by the attacker.

References (1)

Source: security_alert@emc.com
Vendor Advisory

Timeline

No history available yet.