[CVE-2026-91882] Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive In…

Descripción técnica

Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in the API client error handling component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure.

Puntuación CVSS

Score: 8.6/10 — Severidad: HIGH — Estado NIST: Received

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

Debilidades (CWE)

CWE-209

Fuente oficial

Publicado en NIST NVD.