CVE-2020-5386 - Dell EMC ECS, versions prior to 3.5, contains an Exposure of Resource vulnerability

Back Back to CVE browser

HIGH

Dell EMC ECS, versions prior to 3.5, contains an Exposure of Resource vulnerability

Published Sep 2, 2020

7.5

HIGH

CVSS 3.1

EPSS 1.26%

Description

Dell EMC ECS, versions prior to 3.5, contains an Exposure of Resource vulnerability. A remote unauthenticated attacker can access the list of DT (Directory Table) objects of all internally running services and gain knowledge of sensitive data of the system.

Affected products

Vendor Dell Product Elastic Cloud Storage Default
unknown
Affected
- ≥ unspecified, < 3.5

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Dell	Elastic Cloud Storage	unknown	Affected ≥ unspecified, < 3.5

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-668

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-26568
Advisory
https://www.dell.com/support/security/en-us/details/545893/DSA-2020-208-Dell-EMC-ECS-Security-Update-for-an-Exposure-of-Resource-vulnerability
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-26568		Advisory
https://www.dell.com/support/security/en-us/details/545893/DSA-2020-208-Dell-EMC-ECS-Security-Update-for-an-Exposure-of-Resource-vulnerability		x_refsource_MISCVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner dell

Published Sep 2, 2020

Updated Sep 16, 2024

Reserved Jan 3, 2020

Link CVE-2020-5386

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-5386

Red Hat

No data

ENISA EUVD

Assigner dell

Published Sep 2, 2020

Updated Sep 16, 2024

Link EUVD-2020-26568

GitHub

No data