Hashicorp: >> Terraform >> 1.1.0 Security Vulnerabilities
Terraform version 1.0.8 through 1.5.6 allows arbitrary file write during the `init` operation if run on maliciously crafted Terraform configuration. This vulnerability is fixed in Terraform 1.5.7.
CVSS Score
6.3
EPSS Score
0.0
Published
2023-09-08
aws/resource_aws_iam_user_login_profile.go in the HashiCorp Terraform Amazon Web Services (AWS) provider through v1.12.0 has an inappropriate PRNG algorithm and seeding, which makes it easier for remote attackers to obtain access by leveraging an IAM account that was provisioned with a weak password.
CVSS Score
9.8
EPSS Score
0.004
Published
2018-03-27