SecurityThe Hacker Newsabout 2 hours ago
Dell CSM Flaws Allow Kubernetes Cluster Takeover
3 min read
Dell patched six critical Container Storage Modules flaws, including two CVSS 10.0 missing-authentication bugs that let unauthenticated attackers seize storage admin credentials and bypass authorization. A 9.9 privilege bug grants root on Kubernetes nodes. All CSM versions before 1.17.0 are affected; fixes arrive in 1.18.0 with no workarounds, and Dell urges rotating JWT signing secrets.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyDell