Dell Terraform Provider for PowerStore, versions prior to 1.3.1 , contains a vulnerability that may cause sensitive authentication data to be…
Dell Terraform Provider for PowerStore, versions prior to 1.3.1 , contains a vulnerability that may cause sensitive authentication data to be insufficiently redacted in diagnostic logs. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Dell Technologies
- Product
- Terraform Provider for PowerStore
- CVSS v3.1
- 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weakness
- CWE-532
- Exposure class
- Developer platform, Storage / NAS
- NVD status
- Received
Why it ranks 30 (Notable)
- CVSS v3.1 7.5 high
- Product class: developer platform, storage / NAS
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
- CVE-2026-91891 on this site · NVD · CVE.org · Vulnpedia