Vulnerability Details CVE-2022-31231
Dell ECS, versions 3.5 and 3.6, contain an Improper Access Control in the Identity and Access Management (IAM) module. A remote unauthenticated attacker may potentially exploit this vulnerability, leading to gaining read access to unauthorized data.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 13.8%
CVSS Severity
CVSS v3 Score 5.9
Products affected by CVE-2022-31231
-
cpe:2.3:a:dell:elastic_cloud_storage:-
-
cpe:2.3:a:dell:elastic_cloud_storage:3.0
-
cpe:2.3:a:dell:elastic_cloud_storage:3.6.0.0
-
cpe:2.3:a:dell:elastic_cloud_storage:3.6.0.1
-
cpe:2.3:a:dell:elastic_cloud_storage:3.6.1.0
-
cpe:2.3:a:dell:elastic_cloud_storage:3.6.1.1
-
cpe:2.3:a:dell:elastic_cloud_storage:3.6.1.2
-
cpe:2.3:a:dell:elastic_cloud_storage:3.6.2.2
-
cpe:2.3:a:dell:elastic_cloud_storage:3.6.2.3