CVE-2020-10661

HashiCorp Vault and Vault Enterprise versions 0.11.0 through 1.3.3 may, under certain circumstances, have existing nested-path policies grant access t...

Original description

The description as published by the source.

HashiCorp Vault and Vault Enterprise versions 0.11.0 through 1.3.3 may, under certain circumstances, have existing nested-path policies grant access to Namespaces created after-the-fact. Fixed in 1.3.4.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Affected packages

Bitnami vault

[{"type":"SEMVER","events":[{"introduced":"0.11.0"},{"fixed":"1.3.4"}]}]

References

advisory github.com
advisory hashicorp.com
web nvd.nist.gov