Количество 5
Количество 5
CVE-2022-40186
An issue was discovered in HashiCorp Vault and Vault Enterprise before 1.11.3. A vulnerability in the Identity Engine was found where, in a deployment where an entity has multiple mount accessors with shared alias names, Vault may overwrite metadata to the wrong alias due to an issue with checking the proper alias assigned to an entity. This may allow for unintended access to key/value paths using that metadata in Vault.
CVE-2022-40186
An issue was discovered in HashiCorp Vault and Vault Enterprise before 1.11.3. A vulnerability in the Identity Engine was found where, in a deployment where an entity has multiple mount accessors with shared alias names, Vault may overwrite metadata to the wrong alias due to an issue with checking the proper alias assigned to an entity. This may allow for unintended access to key/value paths using that metadata in Vault.
GHSA-7cgv-v83v-rr87
HashiCorp Vault vulnerable to incorrect metadata access
BDU:2025-04009
Уязвимость платформ для архивирования корпоративной информации HashiCorp Vault и Vault Enterprise, связанная с недостатками разграничения доступа, позволяющая нарушителю получить доступ к потенциально конфиденциальной информации
ROS-20250402-08
Уязвимость vault
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2022-40186 An issue was discovered in HashiCorp Vault and Vault Enterprise before 1.11.3. A vulnerability in the Identity Engine was found where, in a deployment where an entity has multiple mount accessors with shared alias names, Vault may overwrite metadata to the wrong alias due to an issue with checking the proper alias assigned to an entity. This may allow for unintended access to key/value paths using that metadata in Vault. | CVSS3: 9.1 | 1% Низкий | почти 4 года назад |
 | CVE-2022-40186 An issue was discovered in HashiCorp Vault and Vault Enterprise before 1.11.3. A vulnerability in the Identity Engine was found where, in a deployment where an entity has multiple mount accessors with shared alias names, Vault may overwrite metadata to the wrong alias due to an issue with checking the proper alias assigned to an entity. This may allow for unintended access to key/value paths using that metadata in Vault. | CVSS3: 9.1 | 1% Низкий | почти 4 года назад |
| GHSA-7cgv-v83v-rr87 HashiCorp Vault vulnerable to incorrect metadata access | CVSS3: 9.1 | 1% Низкий | почти 4 года назад |
 | BDU:2025-04009 Уязвимость платформ для архивирования корпоративной информации HashiCorp Vault и Vault Enterprise, связанная с недостатками разграничения доступа, позволяющая нарушителю получить доступ к потенциально конфиденциальной информации | CVSS3: 9.1 | 1% Низкий | почти 4 года назад |
 | ROS-20250402-08 Уязвимость vault | CVSS3: 9.1 | 1% Низкий | больше 1 года назад |
Уязвимостей на страницу