CVE-2025-43936: High severity Dell ObjectScale vulnerability
Dell ObjectScale, versions prior to ObjectScale 4.4.0.0, contains an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell ObjectScaleto a version that resolves this vulnerability.Fixed in 4.4.0.0
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Dell ObjectScale deployments running versions earlier than 4.4.0.0 are affected if they are reachable by an attacker with remote network access. No prior authentication or user interaction is required.
What does an attacker need to exploit it?
An attacker needs remote access to the affected ObjectScale deployment. Exploitation has high attack complexity, but successful exploitation can result in unauthorized access and affect confidentiality, integrity, and availability.
Which version addresses the issue?
ObjectScale 4.4.0.0 is the first version not identified as affected by the provided advisory information.