CVE-2025-6004
Vault Userpass and LDAP User Lockout Bypass
Résumé
Vault Userpass and LDAP User Lockout Bypass
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Vault and Vault Enterprise’s (“Vault”) user lockout feature could be bypassed for Userpass and LDAP authentication methods. Fixed in Vault Community Edition 1.20.1 and Vault Enterprise 1.20.1, 1.19.7, 1.18.12, and 1.16.23.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
vault
[{"type":"SEMVER","events":[{"introduced":"1.13.0"},{"fixed":"1.20.1"}]}]
Références
- advisory discuss.hashicorp.com
- web nvd.nist.gov