Dell ECS and ObjectScale Insertion of Sensitive Information into Log File Vulnerability

A vulnerability allowing the insertion of sensitive information into log files exists in Dell ECS versions prior to 3.8.1.5 and ObjectScale version 4.0.0.0. This vulnerability could be exploited by a low-privileged attacker with local access, potentially leading to unauthorized information disclosure.

Impact

Exploitation of this vulnerability could result in the unauthorized disclosure of sensitive information.

Remediation

Users are advised to upgrade to Dell ECS version 3.8.1.5 or later, or Dell ObjectScale version 4.0.0.1 or later. Instructions for upgrading can be found by opening a Service Request and quoting DSA-2025-242.