Hashicorp Vault Enterprise الثغرات

التسلسل الزمني

النسخة

1.012
1.112
1.212
1.312
1.412

معالجة

Official Fix41
Temporary Fix0
Workaround0
Unavailable0
Not Defined3

قابلية الاستغلال

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined44

متجه الوصول

Not Defined0
Physical0
Local3
Adjacent17
Network24

توثيق

Not Defined0
High10
Low13
None21

تفاعل المستخدم

Not Defined0
Required5
None39

C3BM Index

السنة السابقة

CVSSv3 Base

≤10
≤20
≤32
≤46
≤57
≤613
≤77
≤85
≤94
≤100

CVSSv3 Temp

≤10
≤20
≤32
≤46
≤57
≤615
≤77
≤84
≤93
≤100

VulDB

≤10
≤21
≤36
≤48
≤55
≤615
≤72
≤87
≤90
≤100

NVD

≤10
≤20
≤31
≤40
≤50
≤65
≤72
≤85
≤91
≤108

CNA

≤10
≤20
≤32
≤40
≤55
≤63
≤73
≤82
≤91
≤100

المجهز

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

إكسبلويت ذات هجوم فوري

<1k10
<2k28
<5k6
<10k0
<25k0
<50k0
<100k0
≥100k0

إكسبلويت اليوم

<1k44
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

حجم سوق الإكسبلويت

السنة السابقة

🔴 CTI النشاطات

Affected Versions (120): 1.0, 1.1, 1.2, 1.2.1, 1.2.2, 1.2.3, 1.2.4, 1.3, 1.3.1, 1.3.2, 1.3.3, 1.3.4, 1.3.5, 1.3.6, 1.3.7, 1.4, 1.4.1, 1.4.2, 1.4.3, 1.5, 1.5.1, 1.5.2, 1.5.3, 1.5.4, 1.5.5, 1.5.6, 1.5.7, 1.5.8, 1.6, 1.6.1, 1.6.2, 1.6.3, 1.6.4, 1.6.5, 1.7, 1.7.1, 1.7.2, 1.7.3, 1.7.4, 1.7.5, 1.7.6, 1.7.7, 1.7.8, 1.7.9, 1.8, 1.8.1, 1.8.2, 1.8.3, 1.8.4, 1.8.5, 1.8.6, 1.8.7, 1.8.8, 1.9, 1.9.1, 1.9.2, 1.9.3, 1.9.4, 1.9.5, 1.9.6, 1.9.7, 1.9.8, 1.9.9, 1.10, 1.10.1, 1.10.2, 1.10.3, 1.10.4, 1.10.5, 1.10.6, 1.10.7, 1.10.8, 1.10.9, 1.11, 1.11.1, 1.11.2, 1.11.3, 1.11.4, 1.11.5, 1.11.6, 1.11.7, 1.11.8, 1.12, 1.12.1, 1.12.2, 1.12.3, 1.12.4, 1.12.5, 1.12.6, 1.12.7, 1.12.8, 1.13, 1.13.1, 1.13.2, 1.13.3, 1.13.4, 1.13.5, 1.13.6, 1.13.7, 1.13.8, 1.13.9, 1.14, 1.14.1, 1.14.2, 1.14.3, 1.14.4, 1.14.5, 1.14.6, 1.14.7, 1.14.8, 1.14.9, 1.15, 1.15.1, 1.15.2, 1.15.3, 1.15.4, 1.15.5, 1.15.6, 1.15.7, 2022-07-17

منشورBaseTempالثغرة0dayاليومق�معالجةCTICVE
30/04/20243.73.7HashiCorp Vault Enterprise HTTP Request الكشف عن المعلومات$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2024-2877
04/04/20245.15.1HashiCorp Vault/Vault Enterprise TLS Certificate Privilege Escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2024-2660
05/03/20245.95.8HashiCorp Vault/Vault Enterprise TLS Certificate توثيق ضعيف$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2024-2048
01/02/20244.54.5HashiCorp Vault/Vault Enterprise Audit Device الكشف عن المعلومات$0-$5k$0-$5kNot DefinedNot Defined0.04CVE-2024-0831
09/12/20237.57.3HashiCorp Vault/Vault Enterprise HTTP Request الحرمان من الخدمة$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-6337
09/11/20236.46.4HashiCorp Vault/Vault Enterprise Client Request الحرمان من الخدمة$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2023-5954
29/09/20233.23.1Hashicorp Vault Enterprise Sentinel Role Governing Policy الحرمان من الخدمة$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-3775
29/09/20236.36.3Hashicorp Vault/Vault Enterprise Google Cloud Secrets Engine تجاوز الصلاحيات$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2023-5077
15/09/20234.94.9HashiCorp Vault/Vault Enterprise Transit Secrets Engine تجاوز الصلاحيات$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2023-4680
01/08/20235.35.2HashiCorp Vault/Vault Enterprise LDAP Auth Method الكشف عن المعلومات$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-3462

34 بعض الادخالات لم يتم عرضها

المزيد من الادخالات بحسب Hashicorp

Do you know our Splunk app?

Download it now for free!