CVE-2020-35453
HashiCorp Vault Enterprise’s Sentinel EGP policy feature incorrectly allowed requests to be processed in parent and sibling namespaces. Fixed in 1.5.6...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
HashiCorp Vault Enterprise’s Sentinel EGP policy feature incorrectly allowed requests to be processed in parent and sibling namespaces. Fixed in 1.5.6 and 1.6.1.
Paquets affectés
Bitnami
vault
[{"type":"SEMVER","events":[{"introduced":"1.5.0"},{"fixed":"1.5.6"},{"introduced":"1.6.0"},{"fixed":"1.6.1"}]}]
Références
- advisory discuss.hashicorp.com
- web github.com
- web nvd.nist.gov