PT-2020-18446 · Dell · Dell Emc Ecs

Published 2020-09-02 · Updated 2020-09-11 · CVE-2020-5386

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell EMC ECS versions prior to 3.5

Description The issue allows a remote unauthenticated attacker to access the list of DT (Directory Table) objects of all internally running services, potentially gaining knowledge of sensitive system data.

Recommendations For versions prior to 3.5, update to version 3.5 or later to resolve the issue.

Fix

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-668

Related Identifiers

CVE-2020-5386

Affected Products

Dell Emc Ecs

References · 3

• https://dell.com/support/security/en-us/details/545893/DSA-2020-208-Dell-EMC-ECS-Security-Update-for-an-Exposure-of-Resource-vulnerability · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-5386 · Security Note
• https://osv.dev/vulnerability/CVE-2020-5386 · Vendor Advisory