Skip to contentHashicorp vulnerabilities
Newest
- hashicorp vaultHashiCorp Vault Enterprise’s Sentinel EGP policy feature incorrectly allowed requests to be...CVE-2020-35453Fix available5.3 Medium
- hashicorp vaultEnumeration of users in HashiCorp VaultCVE-2020-35177Fix available5.3 Medium
- hashicorp vaultThe official vault docker images before 0.11.6 contain a blank password for a root user. System...CVE-2020-35192Fix available9.8 Critical
- hashicorp consul docker imageThe official Consul Docker images 0.7.1 through 1.4.2 contain a blank password for a root user....CVE-2020-295649.8 Critical
- hashicorp go-slugUnsafe tar unpacking in HashiCorp go-slugCVE-2020-29529Fix available7.5 High
- hashicorp nomadPath Traversal in HashiCorp NomadCVE-2020-28348Fix available6.5 Medium
- hashicorp consulPrivilege Escalation in HashiCorp ConsulCVE-2020-28053Fix available6.5 Medium
- hashicorp consulDenial of service in HashiCorp ConsulCVE-2020-25201Fix available7.5 High
- hashicorp nomadUse After Free in HashiCorp NomadCVE-2020-27195Fix available9.1 Critical
- hashicorp vaultToken leases could outlive their TTL in HashiCorp VaultCVE-2020-25816Fix available6.8 Medium
- hashicorp vaultHashiCorp Vault Authentication bypassCVE-2020-16251Fix available8.2 High
- hashicorp vaultAuthentication Bypass by Spoofing and Insufficient Verification of Data Authenticity in Hashicorp VaultCVE-2020-16250Fix available8.2 High
- hashicorp vault-ssh-helperImproper Input Validation in vault-ssh-helperCVE-2020-24359Fix available7.5 High
- hashicorp terraform enterpriseHashiCorp Terraform Enterprise up to v202006-1 contained a default signup page that allowed user...CVE-2020-155115.3 Medium
- hashicorp consulImproper Input Validation in HashiCorp ConsulCVE-2020-13170Fix available7.5 High
- hashicorp consulIncorrect Permission Assignment for Critical Resource in Hashicorp ConsulCVE-2020-12797Fix available5.3 Medium
- hashicorp consulDenial of Service (DoS) in HashiCorp ConsulCVE-2020-12758Fix available7.5 High
- hashicorp consulAllocation of Resources Without Limits or Throttling in Hashicorp ConsulCVE-2020-13250Fix available7.5 High
- hashicorp vaultImproper Input Validation in HashiCorp VaultCVE-2020-12757Fix available9.8 Critical
- hashicorp vaultInformation Disclosure in HashiCorp VaultCVE-2020-13223Fix available7.5 High
- hashicorp nomadHashiCorp Nomad and Nomad Enterprise up to 0.10.4 contained a cross-site scripting vulnerability such that files from a malicious workload could cause arbitrary JavaScript to execute in the web UI. Fi…CVE-2020-10944Fix available5.4 Medium
- hashicorp vaultHashiCorp Vault Improper Privilege ManagementCVE-2020-10661Fix available9.1 Critical
- hashicorp vaultHashiCorp Vault Improper Privilege ManagementCVE-2020-10660Fix available5.3 Medium
- hashicorp sentinelHashiCorp Sentinel up to 0.10.1 incorrectly parsed negation in certain policy expressions. Fixed...CVE-2019-198797.5 High
- hashicorp nomadImproper Certificate Validation in HashiCorp NomadCVE-2020-7956Fix available9.8 Critical
- hashicorp consulDenial of Service (DoS) in HashiCorp ConsulCVE-2020-7219Fix available7.5 High
- hashicorp nomadAllocation of Resources Without Limits or Throttling in HashiCorp NomadCVE-2020-7218Fix available7.5 High
- hashicorp consulIncorrect Authorization in HashiCorp ConsulCVE-2020-7955Fix available5.3 Medium
- hashicorp vaultImproper Resource Shutdown or Release in HashiCorp VaultCVE-2020-7220Fix available7.5 High
- hashicorp terraformUse of a Broken or Risky Cryptographic Algorithm in TerraformCVE-2019-19316Fix available7.5 High
- hashicorp nomadHashicorp Nomad Access Control IssuesCVE-2019-12618Fix available9.8 Critical
- hashicorp consulHashiCorp Consul Incorrect Access Control vulnerabilityCVE-2019-12291Fix available7.5 High
- hashicorp consulHashiCorp Consul vulnerable to Origin Validation ErrorCVE-2019-9764Fix available7.4 High
- hashicorp consulHashiCorp Consul Access Restriction BypassCVE-2019-8336Fix available8.1 High
- hashicorp consulHashiCorp Consul can use cleartext agent-to-agent RPC communicationCVE-2018-19653Fix available5.9 Medium
- hashicorp vaultHashiCorp Vault before 1.0.0 writes the master key to the server log in certain unusual or...CVE-2018-197868.1 High
- hashicorp packerRecommended update for aws-cli, python-boto3, python-botocore, python-s3transferCVE-2018-15869Fix available5.3 Medium
- hashicorp vagrant vmware fusionIt is possible to exploit an unsanitized PATH in the suid binary that ships with vagrant-vmware...CVE-2017-168737.8 High
- hashicorp vagrant vmware fusionHashicorp vagrant-vmware-fusion 5.0.4 allows local users to steal root privileges if VMware...CVE-2017-168397.0 High
- hashicorp vagrant vmware fusionThe vagrant update process in Hashicorp vagrant-vmware-fusion 5.0.2 through 5.0.4 allows local...CVE-2017-165127.8 High
- hashicorp terraformHashiCorp Terraform Amazon Web Services (AWS) uses an insecure PRNGCVE-2018-9057Fix available9.8 Critical
- hashicorp vagrantIf HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.3 is installed but...CVE-2017-16777Public exploit7.8 High
- hashicorp vagrantIn HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.1, a local attacker or...CVE-2017-16001Public exploit7.8 High
- hashicorp vagrant vmware fusionIn HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.0, a local attacker or...CVE-2017-15884Public exploit7.0 High
- hashicorp vagrant vmware fusionAn insecure suid wrapper binary in the HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware...CVE-2017-12579Public exploit7.8 High
- hashicorp vagrant vmware fusionHashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) before 4.0.24 uses weak...CVE-2017-11741Public exploit8.8 High
- hashicorp vagrant vmware fusionThe sudo helper in the HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) before...CVE-2017-7642Public exploit7.8 High