Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-9180
7.2
HIGHCVSS v3
Severity scale
010
Description
A privileged Vault operator with write permissions to the root namespace’s identity endpoint could escalate their own or another user’s privileges to Vault’s root policy. Fixed in Vault Community Edition 1.18.0 and Vault Enterprise 1.18.0, 1.17.7, 1.16.11, and 1.15.16.
hashicorp/vault
GitHubA tool for secrets management, encryption as a service, and privileged access management
GitHubA tool for secrets management, encryption as a service, and privileged access management>= 1.7.7, < 1.18.0, >= 1.7.7, <= 1.17.7, >= 1.15.0, < 1.15.16, >= 1.16.0, < 1.16.11NVD
hashicorp/vault
Docker HubOfficial vault docker images
Docker HubOfficial vault docker images>= 1.7.7, < 1.18.0, >= 1.7.7, <= 1.17.7, >= 1.15.0, < 1.15.16, >= 1.16.0, < 1.16.11NVD