Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-23fq-q7hc-993r

Опубликовано: 30 авг. 2021
Источник: github
Github: Прошло ревью
CVSS3: 9.8

Описание

HashiCorp Vault underlying database had excessively broad filesystem permissions from v1.4.0 until v1.8.0

HashiCorp Vault and Vault Enterprise 1.4.0 through 1.7.3 initialized an underlying database file associated with the Integrated Storage feature with excessively broad filesystem permissions. Fixed in Vault and Vault Enterprise 1.8.0.

Пакеты

Наименование

github.com/hashicorp/vault

go
Затронутые версииВерсия исправления

>= 1.4.0, < 1.8.0

1.8.0

EPSS

Процентиль: 26%
0.00086
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-281

Связанные уязвимости

CVSS3: 4.4
redhat
почти 4 года назад

HashiCorp Vault and Vault Enterprise 1.4.0 through 1.7.3 initialized an underlying database file associated with the Integrated Storage feature with excessively broad filesystem permissions. Fixed in Vault and Vault Enterprise 1.8.0.

CVSS3: 4.4
nvd
почти 4 года назад

HashiCorp Vault and Vault Enterprise 1.4.0 through 1.7.3 initialized an underlying database file associated with the Integrated Storage feature with excessively broad filesystem permissions. Fixed in Vault and Vault Enterprise 1.8.0.

EPSS

Процентиль: 26%
0.00086
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-281