Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-16250
8.2
HIGHCVSS v3
Published
August 26, 2020
CVSS v2
7.5 HIGH
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
HashiCorp Vault and Vault Enterprise versions 0.7.1 and newer, when configured with the AWS IAM auth method, may be vulnerable to authentication bypass. Fixed in 1.2.5, 1.3.8, 1.4.4, and 1.5.1..
hashicorp/vault
GitHubA tool for secrets management, encryption as a service, and privileged access management
GitHubA tool for secrets management, encryption as a service, and privileged access management>= 0.7.1, < 1.2.5, >= 1.3.0, < 1.3.8, >= 1.4.0, < 1.4.4, >= 1.5.0, < 1.5.1NVD