openbao vulnerabilities (Alpine)
23 vulnerabilities.
-
openbaoAlpine OpenBao's Kerberos Auth Method Accumulates Unaccessible Tokens 5.3 Medium -
openbaoAlpine OpenBao's Inline Auth Incorrectly Redacted Headers 5.4 Medium -
openbaoAlpine OpenBao's cross-namespace lease revocation via legacy sys/revoke path bypasses ACL 7.1 High -
openbaoAlpine OpenBao's Token Store Allows Cross-Namespace Renewal, Revocation 2.0 Low -
openbaoAlpine OpenBao allows SQL Injection in PostgreSQL database secrets engine 4.6 Medium -
openbaoAlpine OpenBao has Decompression Bomb via Unbounded Copy in OCI Plugin Extraction (DoS) 3.1 Low -
openbaoAlpine OpenBao's Certificate Authentication Allows Token Renewal With Different Certificate 2.0 Low -
openbaoAlpine Vault Vulnerable to Denial-of-Service via Unauthenticated Root Token Generation/Rekey Operations 7.5 High -
openbaoAlpine Vault KVv2 Metadata and Secret Deletion Policy Bypass Denial-of-Service 8.1 High -
openbaoAlpine OpenBao has Reflected XSS in its OIDC authentication error message 9.4 Critical -
openbaoAlpine OpenBao lacks user confirmation for OIDC direct callback mode 9.6 Critical -
openbaoAlpine OpenBao and Vault Leak []byte Fields in Audit Logs 5.7 Medium -
openbaoAlpine OpenBao leaks HTTPRawBody in Audit Logs 5.7 Medium -
openbaoAlpine OpenBao vulnerable to denial of service via malicious JSON request processing 7.5 High -
openbaoAlpine OpenBao Login MFA Bypasses Rate Limiting and TOTP Token Reuse 5.7 Medium -
openbaoAlpine OpenBao TOTP Secrets Engine Enables Code Reuse 6.5 Medium -
openbaoAlpine OpenBao: Timing Side-Channel in Userpass Auth Method 3.7 Low -
openbaoAlpine OpenBao Userpass and LDAP User Lockout Bypass 5.3 Medium -
openbaoAlpine OpenBao: Privileged Operator May Execute Code on the Underlying Host 9.1 Critical -
openbaoAlpine OpenBao Root Namespace Operator May Elevate Token Privileges 7.2 High -
openbaoAlpine OpenBao Vulnerable to Unauthenticated Rekey Operation Cancellation 6.9 Medium -
openbaoAlpine OpenBao May Leak Sensitive Information in Logs When Processing Malformed Data 4.5 Medium -
openbaoAlpine Vault May Include Sensitive Data in Error Logs When Using the KV v2 Plugin 4.5 Medium