CVE-2025-6015
Vault Login MFA Bypass of Rate Limiting and TOTP Code Reuse
Résumé
Vault Login MFA Bypass of Rate Limiting and TOTP Code Reuse
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Vault and Vault Enterprise’s (“Vault”) login MFA rate limits could be bypassed and TOTP tokens could be reused. Fixed in Vault Community Edition 1.20.1 and Vault Enterprise 1.20.1, 1.19.7, 1.18.12, and 1.16.23.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
vault
[{"type":"SEMVER","events":[{"introduced":"1.10.0"},{"fixed":"1.20.1"}]}]
Références
- advisory discuss.hashicorp.com
- web nvd.nist.gov