HashiCorp Vault and Vault Enterprise 1.4.0 up to and including 1.7.3 initialized an underlying database file associated with the Integrated Storage feature with excessively broad filesystem permissions. Fixed in Vault and Vault Enterprise 1.8.0.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
hashicorp vault |