CVE-2025-6014
Vault TOTP Secrets Engine Code Reuse
Résumé
Vault TOTP Secrets Engine Code Reuse
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Vault and Vault Enterprise’s (“Vault”) TOTP Secrets Engine code validation endpoint is susceptible to code reuse within its validity period. Fixed in Vault Community Edition 1.20.1 and Vault Enterprise 1.20.1, 1.19.7, 1.18.12, and 1.16.23.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
vault
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.20.1"}]}]
Références
- advisory discuss.hashicorp.com
- web nvd.nist.gov