{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3adellterraform_provider_for_powerstore/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:dell:terraform_provider_for_powerstore:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.5,"id":"CVE-2026-91891"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Terraform Provider for PowerStore (\u003c 1.3.1)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Dell"],"content_html":"\u003cp\u003eDell Terraform Provider for PowerStore versions prior to 1.3.1 contains a vulnerability that results in the insufficient redaction of sensitive authentication data within diagnostic logs. An unauthenticated attacker with remote access to these logs could potentially retrieve sensitive credentials, leading to information exposure.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation may lead to the disclosure of sensitive authentication credentials, which could be utilized by an attacker for unauthorized access to systems managed by the affected Terraform provider.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003eUpgrade the Dell Terraform Provider for PowerStore to version 1.3.1 or later to ensure that authentication data is properly redacted in diagnostic logs. Additionally, review existing diagnostic log files for evidence of exposed credentials and consider rotating any sensitive information that may have been logged prior to the upgrade.\u003c/p\u003e\n","date_modified":"2026-11-11T20:11:54Z","date_published":"2026-11-11T20:11:54Z","id":"https://feed.craftedsignal.io/briefs/2026-11-dell-terraform-provider-powerstore-log-exposure-cve-2026-91891/","summary":"Dell Terraform Provider for PowerStore versions prior to 1.3.1 are vulnerable to information exposure, as the provider fails to sufficiently redact sensitive authentication credentials in diagnostic logs.","title":"Dell Terraform Provider for PowerStore: Information exposure in diagnostic logs (CVE-2026-91891)","url":"https://feed.craftedsignal.io/briefs/2026-11-dell-terraform-provider-powerstore-log-exposure-cve-2026-91891/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:dell:terraform_provider_for_powerstore:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}