Beveiligingsadvies

CVE-2021-40862

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-09-15 18:03:45
Laatst bijgewerkt 2024-08-04 02:51:07
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

HashiCorp Terraform Enterprise up to v202108-1 contained an API endpoint that erroneously disclosed a sensitive URL to authenticated parties, which could be used for privilege escalation or unauthorized modification of a Terraform configuration. Fixed in v202109-1.