The vulnerability involves the insertion of sensitive information into externally‑accessible files or directories within the API client error handling module of Dell's Terraform Provider for OME. An unauthenticated attacker who can reach the provider remotely could exploit this flaw to expose confidential data.

Dell Terraform Provider for OME versions 1.0.0 through 1.2.3 are affected. The flaw impacts the provider’s error handling component and does not extend to other Dell products within the same line.

The CVSS score of 8.6 indicates a high‑severity flaw. The EPSS score of < 1% indicates a very low probability of exploitation. The vulnerability is not listed in the CISA KEV catalog. Because it can be triggered by unauthenticated remote access to the provider’s API, the attack vector is likely remote. An attacker can invoke error paths that write sensitive material to files readable by external users, resulting in data exposure.