Dell ECS and ObjectScale Cleartext Transmission of Sensitive Information Vulnerability

A vulnerability allowing cleartext transmission of sensitive information exists in Dell ECS versions 3.8.1.0 through 3.8.1.7, and in Dell ObjectScale versions prior to 4.2.0.0. This vulnerability could be exploited by an unauthenticated attacker with remote access, leading to unauthorized information exposure.

Impact

Exploitation of this vulnerability could result in unauthorized interception and exposure of sensitive information transmitted over the network.

Remediation

Users can upgrade to Dell ObjectScale version 4.2.0.0 or later. For ECS, version 4.2.0.0 or later is also recommended. Instructions for upgrading can be found by opening a Service Request for an Operating Environment Upgrade and quoting DSA-2026-047.