DSA-2026-358: Security Update for Dell OpenManage Python SDK (omsdk) Vulnerability
Oversigt: Dell Open Manage Python SDK (omsdk) remediation is available for a security vulnerability that could be exploited by malicious users to compromise the affected system.
Denne artikel gælder for
Denne artikel gælder ikke for
Denne artikel er ikke knyttet til et bestemt produkt.
Det er ikke alle produktversioner, der er identificeret i denne artikel.
Virkning
High
Oplysninger
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
| CVE-2026-68864 | Dell Open Manage Python SDK (omsdk) contains an improper TLS certificate validation issue in the redfish_operation execution path. The SDK exposes a verify_ssl configuration option intended to control certificate validation. However, WsManProtocolBase.redfish_operation ignores this setting and unconditionally disables certificate validation by passing verify=False to the underlying HTTP request. As a result, an operator explicitly enabling TLS verification with verify_ssl=True still performs Redfish communication without certificate validation. | 7.5 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
| CVE-2026-68864 | Dell Open Manage Python SDK (omsdk) contains an improper TLS certificate validation issue in the redfish_operation execution path. The SDK exposes a verify_ssl configuration option intended to control certificate validation. However, WsManProtocolBase.redfish_operation ignores this setting and unconditionally disables certificate validation by passing verify=False to the underlying HTTP request. As a result, an operator explicitly enabling TLS verification with verify_ssl=True still performs Redfish communication without certificate validation. | 7.5 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
Berørte produkter og udbedring
| Product | Affected Versions | Remediated Versions | Link |
|---|---|---|---|
| Dell Open Manage Python SDK (omsdk) | Versions prior to 1.2.519 |
Version 1.2.519 or later
|
Support Page |
| Product | Affected Versions | Remediated Versions | Link |
|---|---|---|---|
| Dell Open Manage Python SDK (omsdk) | Versions prior to 1.2.519 |
Version 1.2.519 or later
|
Support Page |
Løsninger og afhjælpninger
None
Revisionshistorik
"
| Revision | Date | Description |
|---|---|---|
| 1.0 | 2026-09-02 | Initial Release |
Bekræftelser
Dell would like to thank Rudra_16 for reporting this issue.
Relaterede oplysninger
Ansvarsfraskrivelse
Berørte produkter
OpenManage Ansible ModulesArtikelegenskaber
Artikelnummer: 000505139
Artikeltype: Dell Security Advisory
Senest ændret: 02 sep. 2026
Find svar på dine spørgsmål fra andre Dell-brugere
Supportservices
Kontrollér, om din enhed er dækket af supportservices.