Lucene search
GitHub Advisory DatabaseGHSA-H3P9-WRGX-82CMHistoryMay 18, 2021 - 6:18 p.m.
Use of a Broken or Risky Cryptographic Algorithm in Terraform
2021-05-1818:18:50
CWE-20
CWE-327
GitHub Advisory Database
github.com
31
0.002 Low
EPSS
Percentile
53.5%
When using the Azure backend with a shared access signature (SAS), Terraform versions prior to 0.12.17 may transmit the token and state snapshot using cleartext HTTP.
Specific Go Packages Affected
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/hashicorp/terraform | lt | 0.12.17 |
Related
veracode
veracode
Information Disclosure
2019-12-04 02:17:33
cve
cve
CVE-2019-19316
2019-12-02 21:15:00
cvelist
cvelist
CVE-2019-19316
2019-12-02 20:50:44
prion
prion
Design/Logic Flaw
2019-12-02 21:15:00
osv
osv
CVE-2019-19316
2019-12-02 21:15:16
Use of a Broken or Risky Cryptographic Algorithm in Terraform
2021-05-18 18:18:50
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2020:0320-1)
2021-06-09 00:00:00
ibm
ibm
Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOps
2023-10-25 20:24:23