Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-41316
5.3
MEDIUMCVSS v3
Published
October 12, 2022
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
HashiCorp Vault and Vault Enterprise’s TLS certificate auth method did not initially load the optionally configured CRL issued by the role's CA into memory on startup, resulting in the revocation list not being checked if the CRL has not yet been retrieved. Fixed in 1.12.0, 1.11.4, 1.10.7, and 1.9.10.
hashicorp/vault
GitHubA tool for secrets management, encryption as a service, and privileged access management
GitHubA tool for secrets management, encryption as a service, and privileged access management>= 1.11.0, < 1.11.4, >= 1.10.0, < 1.10.7, < 1.9.10NVD
hashicorp/vault
Docker HubOfficial vault docker images
Docker HubOfficial vault docker images>= 1.11.0, < 1.11.4, >= 1.10.0, < 1.10.7, < 1.9.10NVD