← Database

CVE-2022-25374

HIGH CVSS: 7.5 Published: 2022-02-25 Modified: 2026-06-17

Description

HashiCorp Terraform Enterprise v202112-1, v202112-2, v202201-1, and v202201-2 were configured to log inbound HTTP requests in a manner that may capture sensitive data. Fixed in v202202-1.

Affected Platforms

Hashicorp Terraform Enterprise

Weakness Type

CWE-532

References