GHSA-m979-w9wj-qfj9MediumCVSS 5.3

HashiCorp Vault Improper Privilege Management

Published
January 30, 2024
Last Modified
September 16, 2024

🔗 CVE IDs covered (1)

CVE-2020-10660 →

📋 Description

HashiCorp Vault and Vault Enterprise versions 0.9.0 through 1.3.3 may, under certain circumstances, have an Entity's Group membership inadvertently include Groups the Entity no longer has permissions to. Fixed in 1.3.4.

🎯 Affected products1

  • go/github.com/hashicorp/vault:>= 0.9.0, < 1.3.4

🔗 References (6)