CVE-2020-10661
HashiCorp Vault and Vault Enterprise versions 0.11.0 through 1.3.3 may, under certain circumstances, have existing nested-path policies grant access t...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
HashiCorp Vault and Vault Enterprise versions 0.11.0 through 1.3.3 may, under certain circumstances, have existing nested-path policies grant access to Namespaces created after-the-fact. Fixed in 1.3.4.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
影響パッケージ
Bitnami
vault
[{"type":"SEMVER","events":[{"introduced":"0.11.0"},{"fixed":"1.3.4"}]}]
参照URL
- advisory github.com
- advisory hashicorp.com
- web nvd.nist.gov