DSA-2026-358: Security Update for Dell OpenManage Python SDK (omsdk) Vulnerability
Samenvatting: Dell Open Manage Python SDK (omsdk) remediation is available for a security vulnerability that could be exploited by malicious users to compromise the affected system.
Dit artikel is van toepassing op
Dit artikel is niet van toepassing op
Dit artikel is niet gebonden aan een specifiek product.
Niet alle productversies worden in dit artikel vermeld.
Impact
High
Gegevens
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
| CVE-2026-68864 | Dell Open Manage Python SDK (omsdk) contains an improper TLS certificate validation issue in the redfish_operation execution path. The SDK exposes a verify_ssl configuration option intended to control certificate validation. However, WsManProtocolBase.redfish_operation ignores this setting and unconditionally disables certificate validation by passing verify=False to the underlying HTTP request. As a result, an operator explicitly enabling TLS verification with verify_ssl=True still performs Redfish communication without certificate validation. | 7.5 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
| CVE-2026-68864 | Dell Open Manage Python SDK (omsdk) contains an improper TLS certificate validation issue in the redfish_operation execution path. The SDK exposes a verify_ssl configuration option intended to control certificate validation. However, WsManProtocolBase.redfish_operation ignores this setting and unconditionally disables certificate validation by passing verify=False to the underlying HTTP request. As a result, an operator explicitly enabling TLS verification with verify_ssl=True still performs Redfish communication without certificate validation. | 7.5 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
Getroffen producten en herstel
| Product | Affected Versions | Remediated Versions | Link |
|---|---|---|---|
| Dell Open Manage Python SDK (omsdk) | Versions prior to 1.2.519 |
Version 1.2.519 or later
|
Support Page |
| Product | Affected Versions | Remediated Versions | Link |
|---|---|---|---|
| Dell Open Manage Python SDK (omsdk) | Versions prior to 1.2.519 |
Version 1.2.519 or later
|
Support Page |
Tijdelijke oplossingen en risicobeperking
None
Revisiegeschiedenis
"
| Revision | Date | Description |
|---|---|---|
| 1.0 | 2026-09-02 | Initial Release |
Bevestigingen
Dell would like to thank Rudra_16 for reporting this issue.
Verwante informatie
Juridische verklaring van afstand
Getroffen producten
OpenManage Ansible ModulesArtikeleigenschappen
Artikelnummer: 000505139
Artikeltype: Dell Security Advisory
Laatst aangepast: 02 sep. 2026
Vind antwoorden op uw vragen via andere Dell gebruikers
Support Services
Controleer of uw apparaat wordt gedekt door Support Services.