CVE-2025-4656
Vault Vulnerable to Recovery Key Cancellation Denial of Service
Résumé
Vault Vulnerable to Recovery Key Cancellation Denial of Service
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Vault Community and Vault Enterprise rekey and recovery key operations can lead to a denial of service due to uncontrolled cancellation by a Vault operator. This vulnerability (CVE-2025-4656) has been remediated in Vault Community Edition 1.20.0 and Vault Enterprise 1.20.0, 1.19.6, 1.18.11, 1.17.17, and 1.16.22.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
vault
[{"type":"SEMVER","events":[{"introduced":"1.14.8"},{"fixed":"1.20.0"}]}]
Références
- advisory discuss.hashicorp.com
- web nvd.nist.gov