CVE-2020-25816
HashiCorp Vault and Vault Enterprise versions 1.0 and newer allowed leases created with a batch token to outlive their TTL because expiration time was...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
HashiCorp Vault and Vault Enterprise versions 1.0 and newer allowed leases created with a batch token to outlive their TTL because expiration time was not scheduled correctly. Fixed in 1.4.7 and 1.5.4.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
影響パッケージ
Bitnami
vault
[{"type":"SEMVER","events":[{"introduced":"1.0.0"},{"fixed":"1.4.7"},{"introduced":"1.5.0"},{"fixed":"1.5.4"}]}]
参照URL
- advisory github.com
- advisory hashicorp.com
- web nvd.nist.gov