Описание
HashiCorp Vault and Vault Enterprise versions 0.9.0 through 1.3.3 may, under certain circumstances, have an Entity's Group membership inadvertently include Groups the Entity no longer has permissions to. Fixed in 1.3.4.
Ссылки
- Third Party Advisory
- Vendor Advisory
- Third Party Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 0.9.0 (включая) до 1.3.3 (включая)Версия от 0.9.0 (включая) до 1.3.3 (включая)
Одно из
cpe:2.3:a:hashicorp:vault:*:*:*:*:-:*:*:*
cpe:2.3:a:hashicorp:vault:*:*:*:*:enterprise:*:*:*
EPSS
Процентиль: 45%
0.00229
Низкий
5.3 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-276
Связанные уязвимости
CVSS3: 5.3
redhat
почти 6 лет назад
HashiCorp Vault and Vault Enterprise versions 0.9.0 through 1.3.3 may, under certain circumstances, have an Entity's Group membership inadvertently include Groups the Entity no longer has permissions to. Fixed in 1.3.4.
EPSS
Процентиль: 45%
0.00229
Низкий
5.3 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-276