Terraform for ObjectScale (1.2.1-1.3.0) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/terraform-for-objectscale-1.2.1-1.3.0/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 12 Nov 2026 00:09:28 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgDell Terraform for ObjectScale and PowerStore: Sensitive information insertion into log file (CVE-2026-91879)https://feed.craftedsignal.io/briefs/2026-11-dell-terraform-log-exposure-cve-2026-91879/Thu, 12 Nov 2026 00:09:28 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-dell-terraform-log-exposure-cve-2026-91879/Dell Terraform for ObjectScale and PowerStore contains a vulnerability in the client initialization component that allows a low-privileged remote attacker to access sensitive information inserted into log files.Dell Terraform for ObjectScale (versions prior to 1.1.1) and Dell Terraform for PowerStore (versions 1.2.1 through 1.3.0) contain an insertion of sensitive information into Log File vulnerability within the client initialization component. A low-privileged attacker with remote access can potentially exploit this to cause information exposure and unauthorized access.

Impact

Successful exploitation results in unauthorized information exposure, which may lead to unauthorized access.

Recommendation

Consult Dell for official guidance and security updates regarding CVE-2026-91879.

]]>highadvisory