CVE-2026-91891: High severity vulnerability
Dell Terraform Provider for PowerStore, versions prior to 1.3.1 , contains a vulnerability that may cause sensitive authentication data to be insufficiently redacted in diagnostic logs. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell Terraform Provider for PowerStoreto a version that resolves this vulnerability.Fixed in 1.3.1
Event History
Frequently Asked Questions
Which deployments are affected?
Dell Terraform Provider for PowerStore versions earlier than 1.3.1 are affected. Version 1.3.1 or later is not identified as affected by the provided advisory data.
What does an attacker need to exploit this issue?
The issue is rated as remotely exploitable with low attack complexity and requires neither authentication nor user interaction. Successful exploitation could expose sensitive authentication data through diagnostic logs.
Are integrity or availability impacts reported?
The provided severity vector indicates high confidentiality impact, with no reported integrity or availability impact.