Product:
ECS and ObjectScale
Summary
Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.2.0.0 contain an Inclusion of Sensitive Information in Source Code vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information exposure.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.4 | CVE-2026-22275 |
Exploitation
To exploit this vulnerability, an attacker with local access can analyze the source code of the affected products to find sensitive information that should not be exposed. This could involve examining configuration files or other code components that may inadvertently reveal confidential data.
Affected Products
- ECS versions 3.8.1.0 through 3.8.1.7: Vulnerable to information exposure due to sensitive data being included in the source code.
- ObjectScale versions prior to 4.2.0.0: Also susceptible to the same vulnerability, allowing for potential information leakage.
Mitigation
To mitigate this vulnerability, users should upgrade to the latest versions of Dell ECS and ObjectScale that address this issue. Regularly reviewing and securing source code to ensure sensitive information is not included can also help prevent exploitation.