PT-2019-16703 · Dell · Dell Emc Ecs

Publicado 2019-09-27 · Atualizado 2019-10-09 · CVE-2019-3766

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell EMC ECS versions prior to 3.4.0.0

Description The issue concerns an improper restriction of excessive authentication attempts, allowing an unauthenticated remote attacker to potentially perform a password brute-force attack and gain access to targeted accounts.

Recommendations For versions prior to 3.4.0.0, update to version 3.4.0.0 or later to resolve the issue.

Correção

Improper Restriction of Excessive Authentication Attempts

Enumeração de Fraquezas

CWE-307

Identificadores relacionados

CVE-2019-3766

Produtos afetados

Dell Emc Ecs

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-3766 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-3766 · Aviso do Fabricante
• https://dell.com/support/security/en-us/details/537465/DSA-2019-140-Dell-EMC-Elastic-Cloud-Storage-ECS-Improper-Restriction-of-Excessive-Authenticatio · Aviso do Fabricante