DSA-2026-358: Security Update for Dell OpenManage Python SDK (omsdk) Vulnerability
요약: Dell Open Manage Python SDK (omsdk) remediation is available for a security vulnerability that could be exploited by malicious users to compromise the affected system.
이 문서는 다음에 적용됩니다.
이 문서는 다음에 적용되지 않습니다.
이 문서는 특정 제품과 관련이 없습니다.
모든 제품 버전이 이 문서에 나와 있는 것은 아닙니다.
영향
High
세부 정보
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
| CVE-2026-68864 | Dell Open Manage Python SDK (omsdk) contains an improper TLS certificate validation issue in the redfish_operation execution path. The SDK exposes a verify_ssl configuration option intended to control certificate validation. However, WsManProtocolBase.redfish_operation ignores this setting and unconditionally disables certificate validation by passing verify=False to the underlying HTTP request. As a result, an operator explicitly enabling TLS verification with verify_ssl=True still performs Redfish communication without certificate validation. | 7.5 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
| CVE-2026-68864 | Dell Open Manage Python SDK (omsdk) contains an improper TLS certificate validation issue in the redfish_operation execution path. The SDK exposes a verify_ssl configuration option intended to control certificate validation. However, WsManProtocolBase.redfish_operation ignores this setting and unconditionally disables certificate validation by passing verify=False to the underlying HTTP request. As a result, an operator explicitly enabling TLS verification with verify_ssl=True still performs Redfish communication without certificate validation. | 7.5 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
영향을 받는 제품 및 문제 해결
| Product | Affected Versions | Remediated Versions | Link |
|---|---|---|---|
| Dell Open Manage Python SDK (omsdk) | Versions prior to 1.2.519 |
Version 1.2.519 or later
|
Support Page |
| Product | Affected Versions | Remediated Versions | Link |
|---|---|---|---|
| Dell Open Manage Python SDK (omsdk) | Versions prior to 1.2.519 |
Version 1.2.519 or later
|
Support Page |
해결 방법 및 완화 방안
None
개정 내역
"
| Revision | Date | Description |
|---|---|---|
| 1.0 | 2026-09-02 | Initial Release |
감사의 말
Dell would like to thank Rudra_16 for reporting this issue.
관련 정보
법적 고지 사항
해당 제품
OpenManage Ansible Modules문서 속성
문서 번호: 000505139
문서 유형: Dell Security Advisory
마지막 수정 시간: 02 9월 2026
다른 Dell 사용자에게 질문에 대한 답변 찾기
지원 서비스
디바이스에 지원 서비스가 적용되는지 확인하십시오.