Описание
In HashiCorp Vault and Vault Enterprise before 1.7.7, 1.8.x before 1.8.6, and 1.9.x before 1.9.1, clusters using the Integrated Storage backend allowed an authenticated user (with write permissions to a kv secrets engine) to cause a panic and denial of service of the storage backend. The earliest affected version is 1.4.0.
Ссылки
- Vendor Advisory
- Third Party Advisory
- ProductVendor Advisory
- Vendor Advisory
- Third Party Advisory
- ProductVendor Advisory
Уязвимые конфигурации
Одно из
EPSS
4.9 Medium
CVSS3
6.8 Medium
CVSS2
Дефекты
Связанные уязвимости
In HashiCorp Vault and Vault Enterprise before 1.7.7, 1.8.x before 1.8.6, and 1.9.x before 1.9.1, clusters using the Integrated Storage backend allowed an authenticated user (with write permissions to a kv secrets engine) to cause a panic and denial of service of the storage backend. The earliest affected version is 1.4.0.
In HashiCorp Vault and Vault Enterprise before 1.7.7, 1.8.x before 1.8.6, and 1.9.x before 1.9.1, clusters using the Integrated Storage backend allowed an authenticated user (with write permissions to a kv secrets engine) to cause a panic and denial of service of the storage backend. The earliest affected version is 1.4.0.
EPSS
4.9 Medium
CVSS3
6.8 Medium
CVSS2