CVE-2024-51540: Integer Overflow
Dell ECS, versions prior to 3.8.1.3 contains an arithmetic overflow vulnerability exists in retention period handling of ECS. An authenticated user with bucket or object-level access and the necessary privileges could potentially exploit this vulnerability to bypass retention policies and delete objects.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-51540?
CVE-2024-51540 has a high severity rating due to the potential for an authenticated user to bypass retention policies.
How do I fix CVE-2024-51540?
To fix CVE-2024-51540, upgrade Dell ECS to version 3.8.1.3 or later.
Who is affected by CVE-2024-51540?
CVE-2024-51540 affects users of Dell ECS versions prior to 3.8.1.3.
What types of attacks can exploit CVE-2024-51540?
CVE-2024-51540 can be exploited to bypass retention policies and potentially delete objects.
What is the nature of the vulnerability in CVE-2024-51540?
CVE-2024-51540 is an arithmetic overflow vulnerability related to retention period handling in Dell ECS.