CVE-2026-91879: High severity vulnerability
Dell Terraform for ObjectScale and Powerstore, versions prior to 1.1.1 (ObjectScale) and versions 1.2.1 through 1.3.0 (PowerStore) contains an insertion of sensitive information into Log File vulnerability in the client initialization component. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized access.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell Terraform for ObjectScaleto a version that resolves this vulnerability.Fixed in 1.1.1
Event History
Frequently Asked Questions
Which deployments are affected?
Affected versions are Dell Terraform for ObjectScale releases earlier than 1.1.1 and Dell Terraform for PowerStore versions 1.2.1 through 1.3.0. The issue is in the client initialization component.
What level of access does an attacker need?
An attacker needs remote access and low-level privileges. No user interaction is required for exploitation.
What could exploitation allow?
Successful exploitation could expose sensitive information and enable unauthorized access. The reported impact includes high confidentiality, integrity, and availability impact.
What versions should be used to remediate the issue?
For ObjectScale, upgrade to version 1.1.1 or later. For PowerStore, the affected range ends at 1.3.0; the provided data does not identify a specific fixed version.