Terraform Provider For Redfish
Monthly
Dell Terraform Provider for Redfish versions before 1.6.2 exposes Redfish BMC traffic, including credentials, to man-in-the-middle interception because TLS certificate verification is unconditionally disabled in its base HTTP transport. This critical-severity flaw (CVSS 9.0) allows an unauthenticated remote attacker who occupies a MITM position to capture or alter sensitive Redfish API communications, though exploitation is condition-gated to active provider-to-BMC traffic windows and is materially lower risk on trusted, isolated management segments. No public exploit identified at time of analysis; Dell recommends upgrading to 1.6.2.
Sensitive information handled by the redfish_certificate resource in the Dell Terraform Provider for Redfish (versions 1.1.0 through 1.6.1) can be exposed to unauthorized parties through CWE-532 weakness, most plausibly via Terraform debug logs, state files, or CI/CD console output. Exploitation requires a high-privileged actor operating within the Terraform workflow (PR:H) who also has access to wherever the sensitive data is written, so realistic abuse is confined to users already close to the automation pipeline; the bounded version range and low confidentiality impact further constrain it. The vendor scores this CVSS 4.3, and our independent assessment concurs at 4.3 with confidentiality-only impact, making it a low-severity information-exposure issue rather than an urgent patching priority. No public exploit identified at time of analysis.
Dell Terraform Provider for Redfish versions before 1.6.2 exposes Redfish BMC traffic, including credentials, to man-in-the-middle interception because TLS certificate verification is unconditionally disabled in its base HTTP transport. This critical-severity flaw (CVSS 9.0) allows an unauthenticated remote attacker who occupies a MITM position to capture or alter sensitive Redfish API communications, though exploitation is condition-gated to active provider-to-BMC traffic windows and is materially lower risk on trusted, isolated management segments. No public exploit identified at time of analysis; Dell recommends upgrading to 1.6.2.
Sensitive information handled by the redfish_certificate resource in the Dell Terraform Provider for Redfish (versions 1.1.0 through 1.6.1) can be exposed to unauthorized parties through CWE-532 weakness, most plausibly via Terraform debug logs, state files, or CI/CD console output. Exploitation requires a high-privileged actor operating within the Terraform workflow (PR:H) who also has access to wherever the sensitive data is written, so realistic abuse is confined to users already close to the automation pipeline; the bounded version range and low confidentiality impact further constrain it. The vendor scores this CVSS 4.3, and our independent assessment concurs at 4.3 with confidentiality-only impact, making it a low-severity information-exposure issue rather than an urgent patching priority. No public exploit identified at time of analysis.