| CVE-2024-7594 |
Vault’s SSH secrets engine did not require the valid_principals list to contain a value by default
|
7.5
Élevée
|
26 sept. 2024 |
| CVE-2024-6468 |
Vault and Vault Enterprise did not properly handle requests originating from unauthorized IP addresses when the TCP…
|
7.5
Élevée
|
11 juil. 2024 |
| CVE-2024-2048 |
Vault and Vault Enterprise (“Vault”) TLS certificate auth method did not correctly validate client certificates when…
|
8.1
Élevée
|
4 mars 2024 |
| CVE-2023-4680 |
HashiCorp Vault and Vault Enterprise transit secrets engine allowed authorized users to specify arbitrary nonces, even…
|
6.8
Moyenne
|
14 sept. 2023 |