Threats tagged 'ghsa-86mq-fwxh-fmw3'

Dell Terraform Provider for PowerFlex versions 1.5.0 through 1.8.0 contains an improper certificate validation vulnerability in its SSH client component. The provider uses ssh.InsecureIgnoreHostKey() by default, which disables SSH host key verification. This flaw could allow an unauthenticated remote attacker to cause information exposure and unauthorized access.