CVE-2019-19316

When using the Azure backend with a shared access signature (SAS), Terraform versions prior to 0.12.17 may transmit the token and state snapshot using…

published December 2, 2019

CVSS
—
EPSS
1%
Percentile
62.4
In the wild
Unconfirmed
What it is

When using the Azure backend with a shared access signature (SAS), Terraform versions prior to 0.12.17 may transmit the token and state snapshot using cleartext HTTP.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00998 · 62.4th percentile
Published
2019-12-02T20:50Z
EPSS history
Timeline
  • 02 DEC 20:50Z
    When using the Azure backend with a shared access signature (SAS), Terraform versions prior to 0.12.17 may transmit the token and state snapshot using…
    cvelistv5