CVE-2020-7220

HashiCorp Vault Enterprise 0.11.0 through 1.3.1 fails, in certain circumstances, to revoke dynamic secrets for a mount in a deleted namespace. Fixed i...

Original description

The description as published by the source.

HashiCorp Vault Enterprise 0.11.0 through 1.3.1 fails, in certain circumstances, to revoke dynamic secrets for a mount in a deleted namespace. Fixed in 1.3.2.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Affected packages

Bitnami vault

[{"type":"SEMVER","events":[{"introduced":"0.11.0"},{"fixed":"1.3.2"}]}]

References

advisory github.com
advisory hashicorp.com
web nvd.nist.gov