This vulnerability arises from improper certificate validation in the proxy‑server component of Dell Container Storage Modules (CSM). When exploited, it allows an attacker to bypass authentication checks and capture credentials that enable management of the underlying storage backend. The weakness, classified as CWE‑295, results in a loss of confidentiality for privileged account information, potentially compromising the entire storage environment.

Dell Container Storage Modules (CSM) versions earlier than 1.18.0 are affected. Any installation that deploys these versions in a network reachable by unauthenticated users should be considered vulnerable.

The CVSS base score of 8.2 classifies this issue as high severity. An attacker does not require prior authentication and only needs to be in the same local or adjacent network segment to interact with the proxy‑server. No exploit code is publicly available, and the vulnerability is not listed in the CISA KEV catalog; the EPSS score is currently not reported, but the attack surface—an unauthenticated network neighbor—remains significant. Consequently, the potential for data exposure is considerable for organizations that expose CSM to untrusted networks.