Horizon Alert
Summary of the vulnerability and why it matters
This critical vulnerability impacts Dell's Terraform Provider for Redfish, a tool used for managing server hardware. It could allow an attacker to intercept sensitive traffic and credentials if they can perform a man-in-the-middle attack, potentially exposing internal systems and data.
- Improper certificate checks allow data interception.
- Protects sensitive server management credentials.
- Confirm relevance and exposure for management tools.
Attack Path
How an attacker could exploit the issue
An attacker could intercept sensitive information and gain unauthorized access by exploiting a flaw in how the Dell Terraform Provider for Redfish handles security certificates. This vulnerability, present in the HTTP transport component, allows an unauthenticated attacker with network access to perform a man-in-the-middle attack. By disabling TLS certificate verification, the attacker can eavesdrop on all Redfish BMC traffic, including credentials, to compromise the system.
- Unauthenticated attacker with remote access.
- Intercepting Redfish BMC traffic by disabling certificate verification.
- Information exposure and unauthorized access to credentials.
Live Threat
Current exploitation, exposure, and threat context
This vulnerability could allow an unauthenticated attacker to intercept sensitive information transmitted over Redfish BMC traffic when TLS certificate verification is disabled. Supported conditions for this exposure include an attacker performing a man-in-the-middle attack on the network.
- Redfish BMC traffic and credentials.
- Man-in-the-middle attack.
- Information exposure and unauthorized access.
Operational Fix
Recommended remediation, mitigation, and detection steps
The Dell Terraform Provider for Redfish's HTTP transport component is vulnerable, potentially exposing sensitive information and granting unauthorized access. This critical issue allows attackers to intercept BMC traffic and credentials via man-in-the-middle attacks due to disabled TLS certificate verification. Owners of infrastructure-as-code tools and the associated hardware management interfaces (like BMCs) should prioritize identifying affected systems, assessing their exposure, and coordinating with vendor management and relevant teams for remediation.
- Infrastructure and platform teams own this.
- Verify Redfish BMC network exposure.
- Plan vendor-coordinated updates.
