CVE-2026-32692
Unauthorized update of out-of-scope Vault secrets
概要
Unauthorized update of out-of-scope Vault secrets
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
An authorization bypass vulnerability in the Vault secrets back-end implementation of Juju versions 3.1.6 through 3.6.18 allows an authenticated unit agent to perform unauthorized updates to secret revisions. With sufficient information, an attacker can poison any existing secret revision within the scope of that Vault secret back-end.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- web github.com