Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0, contains an Inclusion of Sensitive Information in Source Code vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.
Weakness
Source code on a web server or repository often contains sensitive information and should generally not be accessible to users.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Elastic_cloud_storage | Dell | 3.8.1.0 (including) | 4.2.0.0 (excluding) |
| Objectscale | Dell | * | 4.2.0.0 (excluding) |