CVE-2021-40862

HashiCorp Terraform Enterprise up to v202108-1 contained an API endpoint that erroneously disclosed a sensitive URL to authenticated parties, which could be used for privilege escalation or unauthorized modification of a Terraform configuration. Fixed in v202109-1...

CVE-2021-40862

CVE-2021-40862 affects HashiCorp Terraform Enterprise up to version v202108-1. An API endpoint exposed to authenticated users disclosed a sensitive URL, creating risk of privilege escalation or unauthorized modification of Terraform configurations. The vulnerability is fixed in v202109-1. Affecte...