dell emc-elastic-cloud-storage CVE-2019-3766 is a vulnerability in Dell Emc Elastic Cloud Storage
Published on September 27, 2019

Dell EMC ECS versions prior to 3.4.0.0 contain an improper restriction of excessive authentication attempts vulnerability. An unauthenticated remote attacker may potentially perform a password brute-force attack to gain access to the targeted accounts.

NVD

Weakness Type

Improper Restriction of Excessive Authentication Attempts

The software does not implement sufficient measures to prevent multiple failed authentication attempts within in a short time frame, making it more susceptible to brute force attacks.


Products Associated with CVE-2019-3766

Want to know whenever a new CVE is published for Dell Emc Elastic Cloud Storage? stack.watch will email you.

 

Affected Versions

Dell Elastic Cloud Storage Version prior to 3.4.0.0 is affected by CVE-2019-3766

Exploit Probability

EPSS
2.02%
Percentile
83.56%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.