The vulnerability in Dell Container Storage Modules allows an attacker with low privileges to insert sensitive information into log files, which can then be accessed by unauthorized users, exposing confidential data. The weakness stems from improper handling of logging that logs sensitive data without adequate sanitization, as identified by CWE‑532. Once exploited, an attacker could read or retrieve the logged content and compromise confidentiality of the system and data it processes.

All Dell Container Storage Modules versions earlier than 1.18.0 are affected. The impact applies to installations of the Dell Container Storage Modules product line, specifically the management and operational components that generate logs during operation. Administrators should verify they are running a version prior to 1.18.0 to determine whether remediation is required.

The CVSS score of 7.7 indicates high severity. The EPSS score is not available, so the likelihood of exploitation at the time of this analysis is uncertain, but the vulnerability is remotely exploitable by an attacker who can gain low‑privileged access to the system via the network. No CISA KEV listing suggests no known active exploitation, but the nature of the vulnerability makes it attractive to adversaries seeking to exfiltrate data. The attack path requires the attacker to have remote access and leverage the module’s logging mechanism to write sensitive data, after which the compromised logs can be read by other accounts with log access rights.