Dell ECS Improper Certificate Validation Vulnerability Allowing Information Disclosure

A vulnerability exists in Dell ECS versions through 3.8.1.4, related to improper certificate validation. This issue could be exploited by an unauthenticated attacker with adjacent network access, potentially leading to unauthorized information disclosure.

Impact

Exploitation of this vulnerability could result in unauthorized information disclosure.

Remediation

Users are advised to upgrade to Dell ObjectScale version 4.0 or later. For those on ECS 3.8.1.x or 3.8.0.x, upgrades can be made directly to ObjectScale 4.0. Customers on versions prior to ECS 3.8.x must first upgrade to ECS 3.8.x before transitioning to ObjectScale 4.0.