Veille CVE

Recherche « Dell Container Storage Modules (CSM) »

4 CVE

Critique 2 Élevée 1 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Dell Container Storage Modules (CSM) » ✕
  1. CVE-2026-70411 6.5 Moyenne

    Dell Container Storage Modules (CSM) · Dell container storage modules

    Dell Container Storage Modules (CSM), versions prior to 1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-tenant gRPC service (TenantService). An unauthenticated adjacent network attacker could potentially exploit this vulnerability, leading to unauthorized creation of tenant entities, cross-tenant role injection, and modification of storage access control flags.

  2. CVE-2026-67270 7.4 Élevée

    Dell Container Storage Modules (CSM) · Dell container storage modules

    Dell Container Storage Modules (CSM) versions prior to 1.18.0, contains an Improper Certificate Validation vulnerability in the proxy-server component. An unauthenticated adjacent network attacker could potentially exploit this vulnerability, leading to information exposure of storage backend administrator credentials.

  3. CVE-2026-67269 9.9 Critique

    Dell Container Storage Modules (CSM) · Dell container storage modules

    Dell Container Storage Modules (CSM) Operator, versions prior to 1.18.0 contains an Improper Privilege Management vulnerability in the ContainerStorageModule Custom Resource reconciler. A low privileged remote attacker could potentially exploit this vulnerability, leading to escalation of privileges and gaining root-level access on cluster nodes.

  4. CVE-2026-63688 10.0 Critique

    Dell Container Storage Modules (CSM) · Dell container storage modules

    Dell Container Storage Modules (CSM), versions prior to v1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-storage gRPC server. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to storage backend administrator credentials for all registered storage arrays.