Количество 7
Количество 7
BDU:2024-08718
Уязвимость платформ для архивирования корпоративной информации HashiCorp Vault и Vault Enterprise, связанная с неправильной проверкой входных данных, позволяющая нарушителю задавать произвольные случайные значения (нонсы) при отключённой конвергентной криптографии
ROS-20241015-07
Уязвимость vault
ALT-PU-2024-3678
ALT-PU-2024-3678: package `vault` update to version 1.13.12-alt2
ALT-PU-2024-3459
ALT-PU-2024-3459: package `vault` update to version 1.13.12-alt1
CVE-2023-4680
HashiCorp Vault and Vault Enterprise transit secrets engine allowed authorized users to specify arbitrary nonces, even with convergent encryption disabled. The encrypt endpoint, in combination with an offline attack, could be used to decrypt arbitrary ciphertext and potentially derive the authentication subkey when using transit secrets engine without convergent encryption. Introduced in 1.6.0 and fixed in 1.14.3, 1.13.7, and 1.12.11.
CVE-2023-4680
HashiCorp Vault and Vault Enterprise transit secrets engine allowed authorized users to specify arbitrary nonces, even with convergent encryption disabled. The encrypt endpoint, in combination with an offline attack, could be used to decrypt arbitrary ciphertext and potentially derive the authentication subkey when using transit secrets engine without convergent encryption. Introduced in 1.6.0 and fixed in 1.14.3, 1.13.7, and 1.12.11.
GHSA-v84f-6r39-cpfc
HashiCorp Vault Improper Input Validation vulnerability
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2024-08718 Уязвимость платформ для архивирования корпоративной информации HashiCorp Vault и Vault Enterprise, связанная с неправильной проверкой входных данных, позволяющая нарушителю задавать произвольные случайные значения (нонсы) при отключённой конвергентной криптографии | CVSS3: 6.8 | 0% Низкий | около 3 лет назад |
 | ROS-20241015-07 Уязвимость vault | CVSS3: 6.8 | 0% Низкий | почти 2 года назад |
 | ALT-PU-2024-3678 ALT-PU-2024-3678: package `vault` update to version 1.13.12-alt2 | CVSS3: 7.5 | больше 2 лет назад | |
| ALT-PU-2024-3459 ALT-PU-2024-3459: package `vault` update to version 1.13.12-alt1 | CVSS3: 7.5 | больше 2 лет назад | |
 | CVE-2023-4680 HashiCorp Vault and Vault Enterprise transit secrets engine allowed authorized users to specify arbitrary nonces, even with convergent encryption disabled. The encrypt endpoint, in combination with an offline attack, could be used to decrypt arbitrary ciphertext and potentially derive the authentication subkey when using transit secrets engine without convergent encryption. Introduced in 1.6.0 and fixed in 1.14.3, 1.13.7, and 1.12.11. | CVSS3: 6.8 | 0% Низкий | почти 3 года назад |
| CVE-2023-4680 HashiCorp Vault and Vault Enterprise transit secrets engine allowed authorized users to specify arbitrary nonces, even with convergent encryption disabled. The encrypt endpoint, in combination with an offline attack, could be used to decrypt arbitrary ciphertext and potentially derive the authentication subkey when using transit secrets engine without convergent encryption. Introduced in 1.6.0 and fixed in 1.14.3, 1.13.7, and 1.12.11. | CVSS3: 6.8 | 0% Низкий | около 3 лет назад |
| GHSA-v84f-6r39-cpfc HashiCorp Vault Improper Input Validation vulnerability | CVSS3: 6.8 | 0% Низкий | около 3 лет назад |
Уязвимостей на страницу