CVE-2026-91892: Weak Encryption
Dell Terraform Provider for PowerFlex, versions prior to 1.9.0, contains a vulnerability that may permit the use of deprecated cryptographic protocols during secure communications. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell Terraform Provider for PowerFlexto a version that resolves this vulnerability.Fixed in 1.9.0
Event History
Frequently Asked Questions
Which deployments are affected?
Dell Terraform Provider for PowerFlex versions earlier than 1.9.0 are affected. Version 1.9.0 is not identified as affected in the provided information.
What does an attacker need to exploit this issue?
The attacker would need remote access and does not need to authenticate or require user interaction. Exploitation is rated high complexity.
What is the potential impact?
Successful exploitation may expose information through the use of deprecated cryptographic protocols during secure communications. No integrity or availability impact is identified.