The vulnerability is an Inclusion of Sensitive Information in Source Code, which permits a local, low‑privileged attacker to read secrets inadvertently embedded in the code, thus compromising data confidentiality. The weakness is classified as CWE‑540, indicating that sensitive data is stored in a publicly accessible manner. If exploited, the attacker can obtain credentials or other private information, potentially leading to further system compromise.

Dell ECS versions 3.8.1.0 through 3.8.1.7 are affected, as are all Dell ObjectScale releases prior to 4.2.0.0. No other product versions are listed as vulnerable.

The CVSS score of 4.4 suggests moderate severity, but the EPSS score of less than 1% points to a very low probability of exploitation. The vulnerability requires local, low‑privileged access and is not listed in the CISA KEV catalog, indicating it is not currently being actively exploited in the wild. Nonetheless, patching remains the recommended defense, as compromise of sensitive information can lead to broader security breaches.