CVE-2021-36230

HashiCorp Terraform Enterprise releases up to v202106-1 did not properly perform authorization checks on a subset of API requests executed using the run token…

published July 20, 2021

CVSS
—
EPSS
1%
Percentile
61.0
In the wild
Unconfirmed
What it is

HashiCorp Terraform Enterprise releases up to v202106-1 did not properly perform authorization checks on a subset of API requests executed using the run token, allowing privilege escalation to organization owner. Fixed in v202107-1.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00954 · 61.0th percentile
Published
2021-07-20T20:53Z
EPSS history
Timeline
  • 20 JUL 20:53Z
    HashiCorp Terraform Enterprise releases up to v202106-1 did not properly perform authorization checks on a subset of API requests executed using the run token…
    cvelistv5