Filter
AND
Versions
HashiCorp VaultVault Operators in Root Namespace May Elevate Their Privileges
7.2
EPSS
0.05%
First published (updated )
go/github.com/hashicorp/vaultVault May be Vulnerable to a Denial of Service Through Memory Exhaustion When Handling Large HTTP Requests
7.5
EPSS
0.05%
First published (updated )
HashiCorp VaultVault Requests Triggering Policy Checks May Lead To Unbounded Memory Consumption
7.5
EPSS
0.05%
First published (updated )
HashiCorp VaultVault's Google Cloud Secrets Engine Removed Existing IAM Conditions When Creating / Updating Rolesets
7.6
First published (updated )
HashiCorp VaultVault Fails to Verify if the AppRole SecretID Belongs to Role During a Destroy Operation
8.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
HashiCorp VaultHashiCorp Vault and Vault Enterprise 1.8.x through 1.8.4 may have an unexpected interaction between …
8.1
First published (updated )
HashiCorp VaultHashiCorp Vault and Vault Enterprise allowed the renewal of nearly-expired token leases and dynamic …
7.4
First published (updated )
HashiCorp VaultHashiCorp Vault and Vault Enterprise Cassandra integrations (storage backend and database secrets en…
7.5
First published (updated )
HashiCorp VaultHashiCorp Vault and Vault Enterprise 1.5.1 and newer, under certain circumstances, may exclude revok…
7.5
First published (updated )
HashiCorp VaultHashiCorp Vault Enterprise 1.6.0 & 1.6.1 allowed the `remove-peer` raft operator command to be execu…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
HashiCorp VaultHashiCorp Vault and Vault Enterprise versions 0.8.3 and newer, when configured with the GCP GCE auth…
8.2
First published (updated )
HashiCorp VaultHashiCorp Vault and Vault Enterprise versions 0.7.1 and newer, when configured with the AWS IAM auth…
8.2
First published (updated )
HashiCorp VaultHashiCorp Vault Enterprise 0.11.0 through 1.3.1 fails, in certain circumstances, to revoke dynamic s…
7.5
First published (updated )
HashiCorp VaultHashiCorp Vault before 1.0.0 writes the master key to the server log in certain unusual or misconfig…
8.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.