Product:
ECS and ObjectScale
Summary
Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.2.0.0 contain a Cleartext Storage of Sensitive Information vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information disclosure.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2026-22276 |
Exploitation
To exploit this vulnerability, an attacker with local access can retrieve sensitive information stored in cleartext. This may involve accessing files or data that should be protected, allowing the attacker to gain unauthorized insights into the system’s sensitive data.
Affected Products
- ECS versions 3.8.1.0 through 3.8.1.7: Vulnerable to information disclosure due to cleartext storage of sensitive information.
- ObjectScale versions prior to 4.2.0.0: Also affected by the same vulnerability, allowing for potential information leakage.
Mitigation
To mitigate this vulnerability, users should upgrade to the latest versions of Dell ECS and ObjectScale that address the cleartext storage issue. Regularly reviewing and securing sensitive information storage practices is also recommended to prevent unauthorized access.