Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qv3p-fmv3-9hww

Опубликовано: 01 авг. 2025
Источник: github
Github: Прошло ревью
CVSS3: 6.5

Описание

Hashicorp Vault's TOTP Secrets Engine Susceptible to Code Reuse

Vault and Vault Enterprise’s (“Vault”) TOTP Secrets Engine code validation endpoint is susceptible to code reuse within its validity period. Fixed in Vault Community Edition 1.20.1 and Vault Enterprise 1.20.1, 1.19.7, 1.18.12, and 1.16.23.

Пакеты

Наименование

github.com/hashicorp/vault

go
Затронутые версииВерсия исправления

< 1.20.1

1.20.1

EPSS

Процентиль: 7%
0.00031
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-156

Связанные уязвимости

CVSS3: 6.5
redhat
5 дней назад

Vault and Vault Enterprise’s (“Vault”) TOTP Secrets Engine code validation endpoint is susceptible to code reuse within its validity period. Fixed in Vault Community Edition 1.20.1 and Vault Enterprise 1.20.1, 1.19.7, 1.18.12, and 1.16.23.

CVSS3: 6.5
nvd
5 дней назад

Vault and Vault Enterprise’s (“Vault”) TOTP Secrets Engine code validation endpoint is susceptible to code reuse within its validity period. Fixed in Vault Community Edition 1.20.1 and Vault Enterprise 1.20.1, 1.19.7, 1.18.12, and 1.16.23.

EPSS

Процентиль: 7%
0.00031
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-156