Skip to content
OpenAdvisories

Package · Go

github.com/hashicorp/terraform

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.3
    CVE-2023-4782

    Terraform Allows Arbitrary File Write During Init Operation

    Terraform version 1.0.8 through 1.5.6 allows arbitrary file write during the `init` operation if run on maliciously crafted Terraform configuration. This vulnerability is fixed in Terraform 1.5.7.

    HashiCorp Terraform github.com/hashicorp/terraform Go
  • High 7.5
    CVE-2019-19316

    Use of a Broken or Risky Cryptographic Algorithm in Terraform

    When using the Azure backend with a shared access signature (SAS), Terraform versions prior to 0.12.17 may transmit the token and state snapshot using cleartext HTTP.

    github.com/hashicorp/terraform Go