Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2019-19316
7.5
HIGHCVSS v3
Published
December 2, 2019
CVSS v2
4.3 MEDIUM
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
When using the Azure backend with a shared access signature (SAS), Terraform versions prior to 0.12.17 may transmit the token and state snapshot using cleartext HTTP.
hashicorp/terraform
GitHubTerraform enables you to safely and predictably create, change, and improve infrastructure. It is a source-available tool that codifies APIs into declarative configuration files that can be shared amongst team members, treated as code, edited, reviewed, and versioned.
GitHubTerraform enables you to safely and predictably create, change, and improve infrastructure. It is a source-available tool that codifies APIs into declarative configuration files that can be shared amongst team members, treated as code, edited, reviewed, and versioned.< 0.12.17NVD