Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-10661
9.1
CRITICALCVSS v3
Published
March 23, 2020
CVSS v2
5.8 MEDIUM
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
HashiCorp Vault and Vault Enterprise versions 0.11.0 through 1.3.3 may, under certain circumstances, have existing nested-path policies grant access to Namespaces created after-the-fact. Fixed in 1.3.4.
hashicorp/vault
GitHubA tool for secrets management, encryption as a service, and privileged access management
GitHubA tool for secrets management, encryption as a service, and privileged access management>= 0.11.0, <= 1.3.3NVD