Hashicorp Terraform Vulnerabilities

Hashicorp Terraform vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

8 September 2023

Terraform Allows Arbitrary File Write During Init Operation
CVE-2023-4782
HashicorpTerraform6.3MEDIUM

22 June 2023

Terraform Enterprise Agent Pool Controls Allowed Unauthorized Workspaces To Target an Agent Pool
CVE-2023-3114
HashicorpTerraform Enterprise5MEDIUM

25 February 2022

Sensitive Data Logging Exposure in HashiCorp Terraform Enterprise
CVE-2022-25374
HashicorpTerraform Enterprise7.5HIGH

15 September 2021

Privilege Escalation Risk in HashiCorp Terraform Enterprise
CVE-2021-40862
HashicorpTerraform Enterprise8.8HIGH

20 July 2021

Privilege Escalation Vulnerability in HashiCorp Terraform Enterprise
CVE-2021-36230
HashicorpTerraform8.8HIGH

22 April 2021

Configuration Vulnerability in HashiCorp Terraform's Vault Provider
CVE-2021-30476
HashicorpTerraform Provider9.8CRITICAL

26 March 2021

Two-Factor Authentication Bypass in HashiCorp Terraform Enterprise
CVE-2021-3153
HashicorpTerraform Enterprise6.5MEDIUM

30 July 2020

User Registration Bypass in HashiCorp Terraform Enterprise
CVE-2020-15511
HashicorpTerraform Enterprise5.3MEDIUM

2 December 2019

Cleartext HTTP Transmission Vulnerability in Terraform from HashiCorp
CVE-2019-19316
HashicorpTerraform7.5HIGH

27 March 2018

Insecure Random Number Generation in HashiCorp Terraform AWS Provider
CVE-2018-9057
HashicorpTerraform9.8CRITICAL