| CVE-2024-7594 |
Vault’s SSH secrets engine did not require the valid_principals list to contain a value by default
|
7.5
High
|
Sep 26, 2024 |
| CVE-2024-6468 |
Vault and Vault Enterprise did not properly handle requests originating from unauthorized IP addresses when the TCP…
|
7.5
High
|
Jul 11, 2024 |
| CVE-2024-2048 |
Vault and Vault Enterprise (“Vault”) TLS certificate auth method did not correctly validate client certificates when…
|
8.1
High
|
Mar 4, 2024 |
| CVE-2023-4680 |
HashiCorp Vault and Vault Enterprise transit secrets engine allowed authorized users to specify arbitrary nonces, even…
|
6.8
Medium
|
Sep 14, 2023 |