Description
Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Log File vulnerability in the provider configuration component. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to information exposure.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Dell | Terraform Provider for OME | < 1.2.4 or later | 1.2.4 or later |