Medium severity5.3NVD Advisory· Published Jul 30, 2020· Updated Jun 17, 2026
CVE-2020-15511
CVE-2020-15511
Description
HashiCorp Terraform Enterprise up to v202006-1 contained a default signup page that allowed user registration even when disabled, bypassing SAML enforcement. Fixed in v202007-1.
Affected products
3- HashiCorp/Terraform Enterprisedescription
<=v202006-1+ 1 more
- (no CPE)range: <=v202006-1
- cpe:2.3:a:hashicorp:terraform_enterprise:*:*:*:*:*:*:*:*range: <202007-1
Patches
Vulnerability mechanics
References
2- github.com/hashicorp/terraform-enterprise-release-notes/blob/master/v202007-1.mdnvdRelease NotesThird Party Advisory
- www.hashicorp.com/blog/category/terraform/nvdVendor Advisory
News mentions
0No linked articles in our index yet.