1. Home
  2. CVE Database
  3. CVE-2020-5386
HIGH · 7.5

CVE-2020-5386

Dell EMC ECS, versions prior to 3.5, contains an Exposure of Resource vulnerability. A remote unauthenticated attacker can access the list of DT (Directory Table) objects of all internally running ser...

Vulnerability Description

Dell EMC ECS, versions prior to 3.5, contains an Exposure of Resource vulnerability. A remote unauthenticated attacker can access the list of DT (Directory Table) objects of all internally running services and gain knowledge of sensitive data of the system.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
DellEmc Elastic Cloud Storage< 3.5.0.0

Related Weaknesses (CWE)

CWE-668

References

FAQ

What is CVE-2020-5386?

CVE-2020-5386 is a vulnerability with a CVSS score of 7.5 (HIGH). Dell EMC ECS, versions prior to 3.5, contains an Exposure of Resource vulnerability. A remote unauthenticated attacker can access the list of DT (Directory Table) objects of all internally running ser...

How severe is CVE-2020-5386?

CVE-2020-5386 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-5386?

Check the references section above for vendor advisories and patch information. Affected products include: Dell Emc Elastic Cloud Storage.