Skip to contentHashicorp vulnerabilities
Newest
- hashicorp nomadPrivilege escalation in Hashicorp NomadCVE-2022-30324Fix available9.8 Critical
- hashicorp go-getterHashiCorp go-getter unsafe downloads could lead to asymmetric resource exhaustionCVE-2022-30323Fix available8.6 High
- hashicorp go-getterHashiCorp go-getter unsafe downloads could lead to arbitrary host accessCVE-2022-30322Fix available8.6 High
- hashicorp go-getterHashiCorp go-getter unsafe downloadsCVE-2022-30321Fix available8.6 High
- hashicorp go-getterHashiCorp go-getter command injectionCVE-2022-26945Fix available9.8 Critical
- hashicorp vaultHashiCorp Vault improper configuration of multi factor authenticationCVE-2022-30689Fix available5.3 Medium
- hashicorp go-getterInsertion of Sensitive Information into Log File in Hashicorp go-getterCVE-2022-29810Fix available5.5 Medium
- hashicorp consul, fedoraproject fedora +1 moreHashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vectorCVE-2022-29153Fix available7.5 High
- hashicorp sentinelSentinel 1.8.2 is vulnerable to Server-side request forgery (SSRF).CVE-2021-441397.5 High
- hashicorp vault"Vault and Vault Enterprise 1.8.0 through 1.8.8, and 1.9.3 allowed the PKI secrets engine under...CVE-2022-25243Fix available6.5 Medium
- hashicorp vaultVault Enterprise clusters using the tokenization transform feature can expose the tokenization...CVE-2022-25244Fix available6.5 Medium
- hashicorp nomadHashiCorp Nomad vulnerable to Allocation of Resources Without Limits or ThrottlingCVE-2022-24685Fix available7.5 High
- hashicorp terraform enterpriseHashiCorp Terraform Enterprise before 202202-1 inserts Sensitive Information into a Log File.CVE-2022-253747.5 High
- hashicorp consulHashiCorp Consul Ingress Gateway Panic Can Shutdown ServersCVE-2022-24687Fix available6.5 Medium
- hashicorp nomadArbitrary file reads in HashiCorp NomadCVE-2022-24683Fix available7.5 High
- hashicorp nomadNomad Spread Job Stanza May Trigger Panic in ServersCVE-2022-24684Fix available6.5 Medium
- hashicorp nomadHashicorp Nomad Information Exposure Through Environmental VariablesCVE-2019-14802Fix available5.3 Medium
- hashicorp nomadHashiCorp Nomad Artifact Download Race ConditionCVE-2022-24686Fix available5.9 Medium
- hashicorp vaultIn HashiCorp Vault and Vault Enterprise before 1.7.7, 1.8.x before 1.8.6, and 1.9.x before 1.9.1,...CVE-2021-45042Fix available4.9 Medium
- hashicorp consulHashiCorp Consul Enterprise before 1.8.17, 1.9.x before 1.9.11, and 1.10.x before 1.10.4 has...CVE-2021-41805Public exploitFix availableEPSS 34.8%8.8 High
- hashicorp nomadImproper Authentication in HashiCorp NomadCVE-2021-43415Fix available8.8 High
- hashicorp vaultHashiCorp Vault Incorrect Permission Assignment for Critical ResourceCVE-2021-43998Fix available6.5 Medium
- hashicorp vaultIncorrect Privilege Assignment in HashiCorp VaultCVE-2021-42135Fix available8.1 High
- hashicorp vaultHashicorp Vault Privilege Escalation VulnerabilityCVE-2021-41802Fix available2.9 Low
- hashicorp nomadHashiCorp Nomad and Nomad Enterprise 1.1.1 through 1.1.5 allowed authenticated users with job...CVE-2021-418656.5 Medium
- hashicorp terraform enterpriseHashiCorp Terraform Enterprise up to v202108-1 contained an API endpoint that erroneously...CVE-2021-408628.8 High
- hashicorp consulHashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic.CVE-2021-38698Fix available6.5 Medium
- hashicorp nomadPrivilege escalation in Hashicorp NomadCVE-2021-37218Fix available8.8 High
- hashicorp consulHashiCorp Consul Privilege Escalation VulnerabilityCVE-2021-37219Fix available8.8 High
- hashicorp vaultHashiCorp Vault Enterprise 0.9.2 through 1.6.2 allowed the read of license metadata from DR...CVE-2021-27668Fix available5.3 Medium
- hashicorp vaultHashiCorp Vault underlying database had excessively broad filesystem permissions from v1.4.0 until v1.8.0CVE-2021-38553Fix available4.4 Medium
- hashicorp vaultImproper Removal of Sensitive Information Before Storage or Transfer in HashiCorp VaultCVE-2021-38554Fix available5.3 Medium
- hashicorp terraformHashiCorp Terraform Enterprise releases up to v202106-1 did not properly perform authorization...CVE-2021-36230Fix available8.8 High
- hashicorp consulHashiCorp Consul L7 deny intention results in an allow actionCVE-2021-36213Fix available7.5 High
- hashicorp consulHashicorp Consul Missing SSL Certificate ValidationCVE-2021-32574Fix available7.5 High
- hashicorp nomadImproper network isolation in Hashicorp NomadCVE-2021-32575Fix available6.5 Medium
- hashicorp vaultInvalid session token expirationCVE-2021-32923Fix available7.4 High
- hashicorp vault-actionVault GitHub Action did not correctly mask multi-line secrets in outputCVE-2021-32074Fix available7.5 High
- hashicorp vaultHashiCorp Vault and Vault Enterprise Cassandra integrations (storage backend and database secrets...CVE-2021-27400Fix available7.5 High
- hashicorp vaultHashiCorp Vault and Vault Enterprise 1.5.1 and newer, under certain circumstances, may exclude...CVE-2021-29653Fix available7.5 High
- hashicorp terraform providerHashiCorp Terraform’s Vault Provider (terraform-provider-vault) did not correctly configure GCE...CVE-2021-304769.8 Critical
- hashicorp consulHashiCorp Consul Enterprise version 1.8.0 up to 1.9.4 audit log can be bypassed by specifically...CVE-2021-28156Fix available7.5 High
- hashicorp consulHashiCorp Consul Cross-site Scripting vulnerabilityCVE-2020-25864Fix available6.1 Medium
- hashicorp terraform enterpriseHashiCorp Terraform Enterprise up to v202102-2 failed to enforce an organization-level setting...CVE-2021-31536.5 Medium
- hashicorp vaultHashiCorp Vault and Vault Enterprise disclosed the internal IP address of the Vault node when responding to some invalid, unauthenticated HTTP requests. Fixed in 1.6.2 & 1.5.7.CVE-2021-3024Fix available5.3 Medium
- hashicorp vaultHashiCorp Vault and Vault Enterprise allowed for enumeration of Secrets Engine mount paths via unauthenticated HTTP requests. Fixed in 1.6.2 & 1.5.7.CVE-2020-25594Fix available5.3 Medium
- hashicorp vaultImproper Authentication in HashiCorp VaultCVE-2021-3282Fix available7.5 High
- hashicorp nomadImproper Privilege Management in HashiCorp NomadCVE-2021-3283Fix available7.5 High
- kubernetes secrets store csi driver, google secret manager provider for secret store csi driver, hashicorp vault provider for secrets store csi driver +1 more +3 moreKubernetes Secrets Store CSI Driver plugin directory traversalsCVE-2020-8567Fix available4.9 Medium
- golang protobuf, hashicorp consul +1 moreImproper Input Validation in GoGo ProtobufCVE-2021-3121Fix available8.6 High
- Show moreLoading…