Dell ECS, versions 3.5 and 3.6, contain an Improper Access Control in the Identity and Access Management (IAM) module. A remote unauthenticated attacker may potentially exploit this vulnerability, leading to gaining read access to unauthorized data.
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2022-54113 |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Fri, 22 May 2026 17:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Improper Access Control Allows Unauthorized Read in Dell ECS IAM |
Fri, 22 May 2026 16:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Dell
Dell ecs |
|
| Vendors & Products |
Dell
Dell ecs |
Fri, 22 May 2026 15:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Dell ECS, versions 3.5 and 3.6, contain an Improper Access Control in the Identity and Access Management (IAM) module. A remote unauthenticated attacker may potentially exploit this vulnerability, leading to gaining read access to unauthorized data. | |
| Weaknesses | CWE-284 | |
| References |
| |
| Metrics |
cvssV3_1
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: dell
Published:
Updated: 2026-05-22T14:31:22.048Z
Reserved: 2022-05-19T15:10:24.879Z
Link: CVE-2022-31231
No data.
No data.
No data.
OpenCVE Enrichment
Updated: 2026-05-22T17:00:15Z
Weaknesses
EUVD