Cleartext Transmission of Azure SAS Token and State Snapshot in Terraform Versions Prior to 0.12.17

Cleartext Transmission of Azure SAS Token and State Snapshot in Terraform Versions Prior to 0.12.17

CVE-2019-19316 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

When using the Azure backend with a shared access signature (SAS), Terraform versions prior to 0.12.17 may transmit the token and state snapshot using cleartext HTTP.

Learn more about our Azure Audit.