Dell ECS and ObjectScale Cleartext Storage of Sensitive Information Vulnerability

A vulnerability allowing cleartext storage of sensitive information exists in Dell ECS versions 3.8.1.0 through 3.8.1.7, and in Dell ObjectScale versions prior to 4.2.0.0. This vulnerability could be exploited by a low-privileged attacker with local access, potentially leading to unauthorized information disclosure.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive information.

Remediation

Users can upgrade to Dell ObjectScale version 4.2.0.0 or later. For Dell ECS, version 4.2.0.0 or later is recommended. Instructions for upgrading can be found on the Dell Support website.