Published: 26/08/2020 Updated: 29/08/2023

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

CVSS v3 Base Score: 8.2 | Impact Score: 4.2 | Exploitability Score: 3.9

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

HashiCorp Vault and Vault Enterprise versions 0.7.1 and newer, when configured with the AWS IAM auth method, may be vulnerable to authentication bypass. Fixed in 1.2.5, 1.3.8, 1.4.4, and 1.5.1..

Vulnerable Product	Search on Vulmon	Subscribe to Product
hashicorp vault

Synopsis Moderate: OpenShift Container Platform 4134 CNF vRAN extras security update Type/Severity Security Advisory: Moderate Topic An update for ztp-site-generate-container, topology-aware-lifecycle-manager and bare-metal-event-relay is now available for Red Hat OpenShift Container Platform 413Red Hat Product Security has rated this upd ...

Synopsis Important: Red Hat OpenShift Data Foundation 4130 security and bug fix update Type/Severity Security Advisory: Important Topic Updated images that include numerous enhancements, security, and bug fixes are now available in Red Hat Container Registry for Red Hat OpenShift Data Foundation 4130 on Red Hat Enterprise Linux 9Red Hat ...

Scans SBOMs for vulnerabilities with Grype

vulnerability-operator Scans SBOMs and Images for vulnerabilities Overview This operator scans all SBOMs from a git-repository for vulnerabilities using Grype The result-list can be emitted as JSON-file served via an endpoint and/or as Prometheus metrics There may be more targets in the future The scans are done periodically Kubernetes Compatibility The image cont

CWE-345 CWE-290 https://www.hashicorp.com/blog/category/vault/https://github.com/hashicorp/vault/blob/master/CHANGELOG.md#151 http://packetstormsecurity.com/files/159478/Hashicorp-Vault-AWS-IAM-Integration-Authentication-Bypass.html https://nvd.nist.gov https://access.redhat.com/errata/RHSA-2023:3342 https://github.com/ckotzbauer/vulnerability-operator

CVE-2020-16250

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect