Description

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "6.5",
  "pubDate": "2026-10-06T16:17:08.937Z",
  "pubdate": "2026-10-06T16:17:08.937Z",
  "executiveSummary": "Dell Container Storage Modules (CSM) versions prior to 1.18.0 are susceptible to an Insertion of Sensitive Information into Log File vulnerability.\nThe vulnerability occurs when sensitive data is improperly written to application logs during routine operations, potentially exposing credentials, tokens, or internal system metadata.\nThis represents a significant information disclosure risk, as unauthorized parties with access to these log files could gain visibility into sensitive system state information.\nThe attack vector is remote, allowing a low-privileged attacker to exploit the vulnerability if they can access the generated log files.\nThe primary risk implication is the potential for credential harvesting or lateral movement derived from the leaked sensitive data, which compromises the integrity and confidentiality of the storage management environment.\nRemediation requires upgrading the Dell Container Storage Modules to version 1.18.0 or later to ensure proper log sanitization and input handling.",
  "technicalDetails": "The vulnerability resides in the logging mechanism of the Dell Container Storage Modules, which improperly handles sensitive data during the execution of storage management tasks.\nThe root cause is the inclusion of sensitive, non-anonymized data into persistent log files during standard application processing. This suggests a failure to implement appropriate data masking or sanitization logic before writing output to the disk.\nAn attacker with low-privileged remote access can leverage this exposure if the log files are accessible via standard log aggregation tools, centralized logging services, or misconfigured container sidecars that lack restricted file system permissions.\nThe attack flow begins with the attacker triggering specific operations within the Container Storage Modules that force the application to log sensitive parameters. Once these operations are executed, the sensitive data—such as authentication tokens or configuration secrets—is serialized into the log stream. The attacker then retrieves these log files, either through legitimate log management access or by exploiting secondary vulnerabilities (e.g., directory traversal or misconfigured storage access) that grant them read access to log storage volumes.\nThe impact of this disclosure is critical, as it bypasses traditional security controls by exposing protected information directly. Once the sensitive information is obtained, the attacker can conduct further reconnaissance or escalate privileges within the containerized environment. Because the information is stored in plaintext within logs, there is no active interaction required by the user to sustain the breach; the data persists until the logs are rotated or deleted.\nThe vulnerability affects all Dell Container Storage Modules versions prior to 1.18.0. Since this flaw does not rely on a specific memory corruption or code execution exploit, it is considered highly deterministic, meaning the attacker can predictably extract the information whenever the relevant logged operations occur."
}