Product:
Elastic Cloud Storage and ObjectScale
Summary
Dell Elastic Cloud Storage and Dell ObjectScale contain a vulnerability that allows for the insertion of sensitive information into log files. A low privileged attacker with local access could exploit this vulnerability, potentially leading to the exposure of secrets. This exposure may allow the attacker to access the vulnerable system with the privileges of the compromised account.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2026-28261 |
Exploitation
To exploit this vulnerability, an attacker with local access can manipulate log files to insert sensitive information. By doing so, they can expose secrets that may be used to gain unauthorized access to the system. The low privilege requirement makes it easier for attackers to execute this exploit without needing elevated permissions.
Affected Products
- Elastic Cloud Storage: Versions 3.8.1.7 and prior are affected by the vulnerability.
- ObjectScale: Versions prior to 4.1.0.3 and version 4.2.0.0 are affected.
Mitigation
To mitigate this vulnerability, users should upgrade to the latest versions of Dell Elastic Cloud Storage and Dell ObjectScale. Regularly monitoring and auditing log files for sensitive information can also help reduce the risk of exploitation. Implementing strict access controls can further limit the potential for unauthorized access.