CVE-2020-10660 in Vault

Zusammenfassung

von MITRE

HashiCorp Vault and Vault Enterprise versions 0.9.0 through 1.3.3 may, under certain circumstances, have an Entity's Group membership inadvertently include Groups the Entity no longer has permissions to. Fixed in 1.3.4.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservieren: 18.03.2020
• Moderieren: akzeptiert
• Eintrag: VDB-152022
• CPE: bereit
• CWE: CWE-276 (bestätigt)
• CVSS: 5.3 (NVD)
• EPSS: 0.00763
• KEV: nein
• Aktivitäten: very low

Quellen

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-10660
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-10660
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-10660/