Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-36230
8.8
HIGHCVSS v3
Published
July 20, 2021
CVSS v2
6.5 MEDIUM
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
HashiCorp Terraform Enterprise releases up to v202106-1 did not properly perform authorization checks on a subset of API requests executed using the run token, allowing privilege escalation to organization owner. Fixed in v202107-1.
hashicorp/terraform
GitHubTerraform enables you to safely and predictably create, change, and improve infrastructure. It is a source-available tool that codifies APIs into declarative configuration files that can be shared amongst team members, treated as code, edited, reviewed, and versioned.
GitHubTerraform enables you to safely and predictably create, change, and improve infrastructure. It is a source-available tool that codifies APIs into declarative configuration files that can be shared amongst team members, treated as code, edited, reviewed, and versioned.< 202107-1NVD