CVE-2022-25244
Vault Enterprise clusters using the tokenization transform feature can expose the tokenization key through the tokenization key configuration endpoint...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Vault Enterprise clusters using the tokenization transform feature can expose the tokenization key through the tokenization key configuration endpoint to authorized operators with read permissions on this endpoint. Fixed in Vault Enterprise 1.9.4, 1.8.9 and 1.7.10.
Paquets affectés
Bitnami
vault
[{"type":"SEMVER","events":[{"introduced":"1.7.0"},{"fixed":"1.7.10"},{"introduced":"1.8.0"},{"fixed":"1.8.9"},{"introduced":"1.9.0"},{"fixed":"1.9.4"}]}]
Références
- advisory nvd.nist.gov
- advisory github.com
- web discuss.hashicorp.com
- web discuss.hashicorp.com