Terraform Enterprise vulnerabilities
3 known vulnerabilities in Terraform Enterprise from HashiCorp. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.7 High severity
Terraform Enterprise: Improper Limitation of a Pathname to a Restricted Directory
HashiCorp Terraform Enterprise contained an issue in its version control system (VCS) ingestion of registry modules that did not correctly enforce the intended boundary on packaged module content. This may allow an authenticated user to include files from outs
- 7.7 High severity
Terraform Enterprise: Incorrect Authorization
Terraform Enterprise since v202207-1 did not properly implement authorization rules for agent pools, allowing the workspace to be targeted by unauthorized agents. This authorization flaw could potentially allow a workspace to access resources from a separate,
- 7.5 High severity
Terraform Enterprise: Insertion of Sensitive Information into Log File
HashiCorp Terraform Enterprise v202112-1, v202112-2, v202201-1, and v202201-2 were configured to log inbound HTTP requests in a manner that may capture sensitive data. Fixed in v202202-1.