Unrated severityNVD Advisory· Published Jul 30, 2020· Updated Aug 4, 2024
CVE-2020-15511
CVE-2020-15511
Description
HashiCorp Terraform Enterprise up to v202006-1 contained a default signup page that allowed user registration even when disabled, bypassing SAML enforcement. Fixed in v202007-1.
Affected products
2- HashiCorp/Terraform Enterprisedescription
- Range: <= v202006-1
Patches
Vulnerability mechanics
References
2- github.com/hashicorp/terraform-enterprise-release-notes/blob/master/v202007-1.mdmitrex_refsource_MISC
- www.hashicorp.com/blog/category/terraform/mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.