CVE-2020-35453

HashiCorp Vault Enterprise’s Sentinel EGP policy feature incorrectly allowed requests to be processed in parent and sibling namespaces. Fixed in 1.5.6...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

HashiCorp Vault Enterprise’s Sentinel EGP policy feature incorrectly allowed requests to be processed in parent and sibling namespaces. Fixed in 1.5.6 and 1.6.1.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

影響パッケージ

Bitnami vault

[{"type":"SEMVER","events":[{"introduced":"1.5.0"},{"fixed":"1.5.6"},{"introduced":"1.6.0"},{"fixed":"1.6.1"}]}]

参照URL

advisory discuss.hashicorp.com
web github.com
web nvd.nist.gov