VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Jul 3, 2018· Updated Jun 17, 2026

CVE-2018-11052

CVE-2018-11052

Description

Dell EMC ECS versions 3.2.0.0 and 3.2.0.1 contain an authentication bypass vulnerability. A remote unauthenticated attacker could exploit this vulnerability to read and modify S3 objects by supplying specially crafted S3 requests.

Affected products

4
  • Dell/Elastic Cloud Storage2 versions
    cpe:2.3:a:dellemc:elastic_cloud_storage:3.2.0.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:dellemc:elastic_cloud_storage:3.2.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:dellemc:elastic_cloud_storage:3.2.0.1:*:*:*:*:*:*:*
  • Dell/ECSllm-fuzzy2 versions
    3.2.0.0, 3.2.0.1+ 1 more
    • (no CPE)range: 3.2.0.0, 3.2.0.1
    • (no CPE)range: 3.2.0.0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.