CVE-2020-35453

HashiCorp Vault Enterprise’s Sentinel EGP policy feature incorrectly allowed requests to be processed in parent and sibling namespaces. Fixed in 1.5.6...

Original description

The description as published by the source.

HashiCorp Vault Enterprise’s Sentinel EGP policy feature incorrectly allowed requests to be processed in parent and sibling namespaces. Fixed in 1.5.6 and 1.6.1.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Affected packages

Bitnami vault

[{"type":"SEMVER","events":[{"introduced":"1.5.0"},{"fixed":"1.5.6"},{"introduced":"1.6.0"},{"fixed":"1.6.1"}]}]

References

advisory discuss.hashicorp.com
web github.com
web nvd.nist.gov