CVE-2019-19316 — n/a / n/a

Description (CNA)

When using the Azure backend with a shared access signature (SAS), Terraform versions prior to 0.12.17 may transmit the token and state snapshot using cleartext HTTP.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://github.com/hashicorp/terraform/security/advisories/GHSA-4rvg-555h-r626

ADP enrichment

CVE

No English description supplied.

https://github.com/hashicorp/terraform/security/advisories/GHSA-4rvg-555h-r626