DSA-2026-234: Security Update for Dell Container Storage Modules Hard-coded Credentials Vulnerability
Podsumowanie: Dell Container Storage Modules remediation is available for Dell Container Storage Modules vulnerability that could be exploited by malicious users to compromise the affected system.
Ten artykuł dotyczy
Ten artykuł nie dotyczy
Ten artykuł nie jest powiązany z żadnym konkretnym produktem.
Nie wszystkie wersje produktu zostały zidentyfikowane w tym artykule.
Skutki
Critical
Dodatkowe informacje
This vulnerability exposes hardcoded authentication credentials in public source code repositories, enabling unauthorized access to sensitive system components.
Szczegóły
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
| CVE-2026-40710 | Dell Container Storage Modules, versions Operator 1.6.0 through 1.16.3 and Helm Charts 1.11.0 through 1.16.3, contain a Use of Hard-coded Credentials vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure. This vulnerability is considered critical as it exposes default authentication credentials in public source code, enabling unauthorized access to sensitive system components. Attackers can leverage these credentials to compromise authentication sessions, exfiltrate cached data, and potentially pivot to additional services within the infrastructure. The public nature of the exposure means any attacker can immediately obtain and use these credentials without requiring any additional privileges or complex attack techniques. | 10.0 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H |
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
| CVE-2026-40710 | Dell Container Storage Modules, versions Operator 1.6.0 through 1.16.3 and Helm Charts 1.11.0 through 1.16.3, contain a Use of Hard-coded Credentials vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure. This vulnerability is considered critical as it exposes default authentication credentials in public source code, enabling unauthorized access to sensitive system components. Attackers can leverage these credentials to compromise authentication sessions, exfiltrate cached data, and potentially pivot to additional services within the infrastructure. The public nature of the exposure means any attacker can immediately obtain and use these credentials without requiring any additional privileges or complex attack techniques. | 10.0 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H |
Produkty, których dotyczy problem, i środki zaradcze
| Product | Software/Firmware | Affected Versions | Remediated Versions | Link |
| Dell Container Storage Modules | CSM Operator | Versions 1.6.0 through 1.16.3 | Version 1.17.0 or later | Contact Customer Support |
| Dell Container Storage Modules | CSM Helm Charts | Versions 1.11.0 through 1.16.3 | Version 1.17.0 or later | Contact Customer Support |
| Product | Software/Firmware | Affected Versions | Remediated Versions | Link |
| Dell Container Storage Modules | CSM Operator | Versions 1.6.0 through 1.16.3 | Version 1.17.0 or later | Contact Customer Support |
| Dell Container Storage Modules | CSM Helm Charts | Versions 1.11.0 through 1.16.3 | Version 1.17.0 or later | Contact Customer Support |
Historia zmian
| Revision | Date | Description |
| 1.0 | 2026-05-21 | Initial Release |
Powiązane informacje
Zastrzeżenie prawne
Produkty, których dotyczy problem
Container Storage Modules Family, Container Storage ModulesWłaściwości artykułu
Numer artykułu: 000467149
Typ artykułu: Dell Security Advisory
Ostatnia modyfikacja: 21 maj 2026
Znajdź odpowiedzi na swoje pytania u innych użytkowników produktów Dell
Usługi pomocy technicznej
Sprawdź, czy Twoje urządzenie jest objęte usługą pomocy technicznej.