Description
Dell Terraform Provider for Redfish, versions 1.1.0 through 1.6.1, contains an Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the redfish_certificate resource component. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to information exposure.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Dell | Terraform Provider for Redfish | < 1.6.2 or later | 1.6.2 or later |