Lucene search

K
cvelistMitreCVELIST:CVE-2021-40862
HistorySep 15, 2021 - 6:03 p.m.

CVE-2021-40862

2021-09-1518:03:45
mitre
www.cve.org
4
hashicorp terraform
api disclosure
v202109-1
privilege escalation
unauthorized modification

AI Score

8.9

Confidence

High

EPSS

0.001

Percentile

42.8%

HashiCorp Terraform Enterprise up to v202108-1 contained an API endpoint that erroneously disclosed a sensitive URL to authenticated parties, which could be used for privilege escalation or unauthorized modification of a Terraform configuration. Fixed in v202109-1.

AI Score

8.9

Confidence

High

EPSS

0.001

Percentile

42.8%

Related for CVELIST:CVE-2021-40862