{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/terraform-for-powerstore-1.2.1-1.3.0/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-91879"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Terraform for ObjectScale (1.2.1-1.3.0)","Terraform for PowerStore (1.2.1-1.3.0)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Dell"],"content_html":"\u003cp\u003eDell Terraform for ObjectScale (versions prior to 1.1.1) and Dell Terraform for PowerStore (versions 1.2.1 through 1.3.0) contain an insertion of sensitive information into Log File vulnerability within the client initialization component. A low-privileged attacker with remote access can potentially exploit this to cause information exposure and unauthorized access.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation results in unauthorized information exposure, which may lead to unauthorized access.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003eConsult Dell for official guidance and security updates regarding CVE-2026-91879.\u003c/p\u003e\n","date_modified":"2026-11-12T00:09:28Z","date_published":"2026-11-12T00:09:28Z","id":"https://feed.craftedsignal.io/briefs/2026-11-dell-terraform-log-exposure-cve-2026-91879/","summary":"Dell Terraform for ObjectScale and PowerStore contains a vulnerability in the client initialization component that allows a low-privileged remote attacker to access sensitive information inserted into log files.","title":"Dell Terraform for ObjectScale and PowerStore: Sensitive information insertion into log file (CVE-2026-91879)","url":"https://feed.craftedsignal.io/briefs/2026-11-dell-terraform-log-exposure-cve-2026-91879/"}],"language":"en","title":"CraftedSignal Threat Feed - Terraform for PowerStore (1.2.1-1.3.0)","version":"https://jsonfeed.org/version/1.1"}