Unscored CVE-2021-3153 EUVD-2021-26497GHSA-mq55-rphv-c5m9

HashiCorp Terraform Enterprise up to v202102-2 failed to enforce an organization-level setting that required users within an organization t…

Published Mar 26, 2021 · Updated Aug 3, 2024 · Assigned by mitre

Description

HashiCorp Terraform Enterprise up to v202102-2 failed to enforce an organization-level setting that required users within an organization to have two-factor authentication enabled. Fixed in v202103-1.

References

https://discuss.hashicorp.com/t/hcsec-2021-06-terraform-enterprise-organization-level-mfa-requirement-was-not-enforced/22401