Количество 5
Количество 5
CVE-2023-0620
HashiCorp Vault and Vault Enterprise versions 0.8.0 through 1.13.1 are vulnerable to an SQL injection attack when configuring the Microsoft SQL (MSSQL) Database Storage Backend. When configuring the MSSQL plugin through the local, certain parameters are not sanitized when passed to the user-provided MSSQL database. An attacker may modify these parameters to execute a malicious SQL command. This issue is fixed in versions 1.13.1, 1.12.5, and 1.11.9.
CVE-2023-0620
HashiCorp Vault and Vault Enterprise versions 0.8.0 through 1.13.1 are vulnerable to an SQL injection attack when configuring the Microsoft SQL (MSSQL) Database Storage Backend. When configuring the MSSQL plugin through the local, certain parameters are not sanitized when passed to the user-provided MSSQL database. An attacker may modify these parameters to execute a malicious SQL command. This issue is fixed in versions 1.13.1, 1.12.5, and 1.11.9.
GHSA-v3hp-mcj5-pg39
HashiCorp Vault’s Microsoft SQL Database Storage Backend Vulnerable to SQL Injection Via Configuration File
BDU:2024-01786
Уязвимость компонента MSSQL Database Storage Backend платформ для архивирования корпоративной информации HashiCorp Vault и Vault Enterprise, позволяющая нарушителю выполнить произвольные SQL-команды
ROS-20250526-06
Множественные уязвимости vault
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2023-0620 HashiCorp Vault and Vault Enterprise versions 0.8.0 through 1.13.1 are vulnerable to an SQL injection attack when configuring the Microsoft SQL (MSSQL) Database Storage Backend. When configuring the MSSQL plugin through the local, certain parameters are not sanitized when passed to the user-provided MSSQL database. An attacker may modify these parameters to execute a malicious SQL command. This issue is fixed in versions 1.13.1, 1.12.5, and 1.11.9. | CVSS3: 6.7 | 0% Низкий | больше 2 лет назад |
 | CVE-2023-0620 HashiCorp Vault and Vault Enterprise versions 0.8.0 through 1.13.1 are vulnerable to an SQL injection attack when configuring the Microsoft SQL (MSSQL) Database Storage Backend. When configuring the MSSQL plugin through the local, certain parameters are not sanitized when passed to the user-provided MSSQL database. An attacker may modify these parameters to execute a malicious SQL command. This issue is fixed in versions 1.13.1, 1.12.5, and 1.11.9. | CVSS3: 6.5 | 0% Низкий | больше 2 лет назад |
| GHSA-v3hp-mcj5-pg39 HashiCorp Vault’s Microsoft SQL Database Storage Backend Vulnerable to SQL Injection Via Configuration File | CVSS3: 6.7 | 0% Низкий | больше 2 лет назад |
 | BDU:2024-01786 Уязвимость компонента MSSQL Database Storage Backend платформ для архивирования корпоративной информации HashiCorp Vault и Vault Enterprise, позволяющая нарушителю выполнить произвольные SQL-команды | CVSS3: 6.7 | 0% Низкий | больше 2 лет назад |
 | ROS-20250526-06 Множественные уязвимости vault | CVSS3: 8.1 | 4 месяца назад |
Уязвимостей на страницу