DSA-2026-358: Security Update for Dell OpenManage Python SDK (omsdk) Vulnerability
Sommaire: Dell Open Manage Python SDK (omsdk) remediation is available for a security vulnerability that could be exploited by malicious users to compromise the affected system.
Cet article s’applique à
Cet article ne s’applique pas à
Cet article n’est lié à aucun produit spécifique.
Toutes les versions de produits ne sont pas identifiées dans cet article.
Impact
High
Détails
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
| CVE-2026-68864 | Dell Open Manage Python SDK (omsdk) contains an improper TLS certificate validation issue in the redfish_operation execution path. The SDK exposes a verify_ssl configuration option intended to control certificate validation. However, WsManProtocolBase.redfish_operation ignores this setting and unconditionally disables certificate validation by passing verify=False to the underlying HTTP request. As a result, an operator explicitly enabling TLS verification with verify_ssl=True still performs Redfish communication without certificate validation. | 7.5 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
| CVE-2026-68864 | Dell Open Manage Python SDK (omsdk) contains an improper TLS certificate validation issue in the redfish_operation execution path. The SDK exposes a verify_ssl configuration option intended to control certificate validation. However, WsManProtocolBase.redfish_operation ignores this setting and unconditionally disables certificate validation by passing verify=False to the underlying HTTP request. As a result, an operator explicitly enabling TLS verification with verify_ssl=True still performs Redfish communication without certificate validation. | 7.5 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
Produits touchés et correction
| Product | Affected Versions | Remediated Versions | Link |
|---|---|---|---|
| Dell Open Manage Python SDK (omsdk) | Versions prior to 1.2.519 |
Version 1.2.519 or later
|
Support Page |
| Product | Affected Versions | Remediated Versions | Link |
|---|---|---|---|
| Dell Open Manage Python SDK (omsdk) | Versions prior to 1.2.519 |
Version 1.2.519 or later
|
Support Page |
Solutions de contournement et mesures d’atténuation
None
Historique de révision
"
| Revision | Date | Description |
|---|---|---|
| 1.0 | 2026-09-02 | Initial Release |
Reconnaissances
Dell would like to thank Rudra_16 for reporting this issue.
Renseignements connexes
Avis de non-responsabilité
Produits touchés
OpenManage Ansible ModulesPropriétés de l’article
Numéro d’article: 000505139
Type d’article: Dell Security Advisory
Dernière modification: 02 sept. 2026
Obtenez des réponses à vos questions auprès d’autre utilisateurs de Dell
Services de soutien
Vérifiez si votre appareil est couvert par les services de soutien.