CVE-2022-41316
HashiCorp Vault and Vault Enterprise’s TLS certificate auth method did not initially load the optionally configured CRL issued by the role's CA into m...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
HashiCorp Vault and Vault Enterprise’s TLS certificate auth method did not initially load the optionally configured CRL issued by the role's CA into memory on startup, resulting in the revocation list not being checked if the CRL has not yet been retrieved. Fixed in 1.12.0, 1.11.4, 1.10.7, and 1.9.10.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
vault
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.9.10"},{"introduced":"1.10.0"},{"fixed":"1.10.7"},{"introduced":"1.11.0"},{"fixed":"1.11.4"}]}]
Références
- advisory discuss.hashicorp.com
- advisory discuss.hashicorp.com
- advisory security.netapp.com
- web nvd.nist.gov