Description
Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in the API client error handling component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Dell | Terraform Provider for OME | < 1.2.4 or later | 1.2.4 or later |