vault vulnerabilities (Alpine)
16 vulnerabilities.
-
vaultAlpine Vault Enterprise Vulnerable to Padding Oracle Attacks When Using a CBC-based Encryption Mechanism with a HSM 2.5 Low -
vaultAlpine HashiCorp Vault's revocation list not respected 5.3 Medium -
vaultAlpine "Vault and Vault Enterprise 1.8.0 through 1.8.8, and 1.9.3 allowed the PKI secrets engine under... 6.5 Medium -
vaultAlpine Vault Enterprise clusters using the tokenization transform feature can expose the tokenization... 6.5 Medium -
vaultAlpine HashiCorp Vault Enterprise 0.9.2 through 1.6.2 allowed the read of license metadata from DR... 5.3 Medium -
vaultAlpine Improper Removal of Sensitive Information Before Storage or Transfer in HashiCorp Vault 5.3 Medium -
vaultAlpine Invalid session token expiration 7.4 High -
vaultAlpine HashiCorp Vault and Vault Enterprise Cassandra integrations (storage backend and database secrets... 7.5 High -
vaultAlpine HashiCorp Vault and Vault Enterprise disclosed the internal IP address of the Vault node when responding to some invalid, unauthenticated HTTP requests. Fixed in 1.6.2 & 1.5.7. 5.3 Medium -
vaultAlpine HashiCorp Vault and Vault Enterprise allowed for enumeration of Secrets Engine mount paths via unauthenticated HTTP requests. Fixed in 1.6.2 & 1.5.7. 5.3 Medium -
vaultAlpine Improper Authentication in HashiCorp Vault 7.5 High -
vaultAlpine Enumeration of users in HashiCorp Vault 5.3 Medium -
vaultAlpine Token leases could outlive their TTL in HashiCorp Vault 6.8 Medium -
vaultAlpine HashiCorp Vault Authentication bypass 8.2 High -
vaultAlpine Authentication Bypass by Spoofing and Insufficient Verification of Data Authenticity in Hashicorp Vault 8.2 High -
vaultAlpine Information Disclosure in HashiCorp Vault 7.5 High