CVE-2019-19316

2019-12-0221:15:16

Google

osv.dev

6.7 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

53.8%

JSON

When using the Azure backend with a shared access signature (SAS), Terraform versions prior to 0.12.17 may transmit the token and state snapshot using cleartext HTTP.

CPENameOperatorVersion
terraformeq0.7.0-rc2
terraformeq0.7.0-rc4
terraformeq0.10.1
terraformeq0.12.0-alpha4
terraformeq0.6.2
terraformeq0.11.7
terraformeq0.12.0-dev20190520H16
terraformeq0.12.12
terraformeq0.6.10
terraformeq0.6.6

Name	Operator	Version
terraform	eq	0.7.0-rc2
terraform	eq	0.7.0-rc4
terraform	eq	0.10.1
terraform	eq	0.12.0-alpha4
terraform	eq	0.6.2
terraform	eq	0.11.7
terraform	eq	0.12.0-dev20190520H16
terraform	eq	0.12.12
terraform	eq	0.6.10
terraform	eq	0.6.6