vault vulnerabilities (Bitnami)
79 vulnerabilities.
vaultBitnamiHashiCorp Vault vulnerable to incorrect metadata access9.1 CriticalvaultBitnamiHashiCorp Vault and Vault Enterprise through 2022-07-17 have Incorrect Access Control.9.1 CriticalvaultBitnamiHashiCorp Vault improper configuration of multi factor authentication5.3 MediumvaultBitnami"Vault and Vault Enterprise 1.8.0 through 1.8.8, and 1.9.3 allowed the PKI secrets engine under...6.5 MediumvaultBitnamiVault Enterprise clusters using the tokenization transform feature can expose the tokenization...6.5 MediumvaultBitnamiIn HashiCorp Vault and Vault Enterprise before 1.7.7, 1.8.x before 1.8.6, and 1.9.x before 1.9.1,...4.9 MediumvaultBitnamiHashiCorp Vault Incorrect Permission Assignment for Critical Resource6.5 MediumvaultBitnamiIncorrect Privilege Assignment in HashiCorp Vault8.1 HighvaultBitnamiHashicorp Vault Privilege Escalation Vulnerability2.9 LowvaultBitnamiHashiCorp Vault Enterprise 0.9.2 through 1.6.2 allowed the read of license metadata from DR...5.3 MediumvaultBitnamiHashiCorp Vault underlying database had excessively broad filesystem permissions from v1.4.0 until v1.8.04.4 MediumvaultBitnamiImproper Removal of Sensitive Information Before Storage or Transfer in HashiCorp Vault5.3 MediumvaultBitnamiInvalid session token expiration7.4 HighvaultBitnamiHashiCorp Vault and Vault Enterprise Cassandra integrations (storage backend and database secrets...7.5 HighvaultBitnamiHashiCorp Vault and Vault Enterprise 1.5.1 and newer, under certain circumstances, may exclude...7.5 HighvaultBitnamiHashiCorp Vault and Vault Enterprise disclosed the internal IP address of the Vault node when responding to some invalid, unauthenticated HTTP requests. Fixed in 1.6.2 & 1.5.7.5.3 MediumvaultBitnamiHashiCorp Vault and Vault Enterprise allowed for enumeration of Secrets Engine mount paths via unauthenticated HTTP requests. Fixed in 1.6.2 & 1.5.7.5.3 MediumvaultBitnamiImproper Authentication in HashiCorp Vault7.5 HighvaultBitnamiHashiCorp Vault Enterprise’s Sentinel EGP policy feature incorrectly allowed requests to be...5.3 MediumvaultBitnamiEnumeration of users in HashiCorp Vault5.3 MediumvaultBitnamiThe official vault docker images before 0.11.6 contain a blank password for a root user. System...9.8 CriticalvaultBitnamiToken leases could outlive their TTL in HashiCorp Vault6.8 MediumvaultBitnamiHashiCorp Vault Authentication bypass8.2 HighvaultBitnamiAuthentication Bypass by Spoofing and Insufficient Verification of Data Authenticity in Hashicorp Vault8.2 HighvaultBitnamiImproper Input Validation in HashiCorp Vault9.8 CriticalvaultBitnamiInformation Disclosure in HashiCorp Vault7.5 HighvaultBitnamiHashiCorp Vault Improper Privilege Management9.1 CriticalvaultBitnamiHashiCorp Vault Improper Privilege Management5.3 MediumvaultBitnamiImproper Resource Shutdown or Release in HashiCorp Vault7.5 High