← Back

CVE-2026-22274

nvd nist
Published: Jan 23, 2026Modified: Jun 17, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Exploitability: 3.9 / Impact: 2.5
Source: security_alert@emc.com (Secondary)

Description

Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0, contains a Cleartext Transmission of Sensitive Information vulnerability in the Fabric Syslog. An unauthenticated attacker with remote access could potentially exploit this vulnerability to intercept and modify information in transit.

Affected (2)

Dell
2 products
Elastic Cloud Storage
Objectscale
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Elastic Cloud Storage
From 3.8.1.0 to 4.2.0.0
Objectscale
Before 4.2.0.0

Related CWEs

CWE-319
Cleartext Transmission of Sensitive Information
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

References (1)

Source: security_alert@emc.com
Vendor Advisory

Timeline

No history available yet.