CGA-224v-j292-29fc

Summary

Use of a Broken or Risky Cryptographic Algorithm in Terraform

Description

When using the Azure backend with a shared access signature (SAS), Terraform versions prior to 0.12.17 may transmit the token and state snapshot using cleartext HTTP.

Specific Go Packages Affected

github.com/hashicorp/terraform/backend/remote-state/azure