Hashicorp Luki w zabezpieczeniach

Oś czasu

Rodzaj

Not Defined	135
Software Library	1
SSH Server Software	1

Produkt

Hashicorp Vault Enterprise	30
Hashicorp Vault	23
Hashicorp Consul	20
Hashicorp Consul Enterprise	19
HashiCorp Nomad	17

Przeciwdziałanie

Official Fix	116
Temporary Fix	0
Workaround	1
Unavailable	0
Not Defined	20

Wykorzystywanie

High	0
Functional	0
Proof-of-Concept	6
Unproven	0
Not Defined	131

Wektor dostępu

Not Defined	0
Physical	0
Local	16
Adjacent	52
Network	69

Uwierzytelnianie

Not Defined	0
High	20
Low	68
None	49

Interakcja z użytkownikiem

Not Defined	0
Required	10
None	127

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	5
≤4	17
≤5	21
≤6	38
≤7	23
≤8	20
≤9	12
≤10	1

CVSSv3 Temp

≤1	0
≤2	0
≤3	5
≤4	18
≤5	22
≤6	41
≤7	25
≤8	16
≤9	9
≤10	1

VulDB

≤1	0
≤2	3
≤3	12
≤4	27
≤5	14
≤6	46
≤7	6
≤8	27
≤9	1
≤10	1

NVD

≤1	0
≤2	0
≤3	2
≤4	1
≤5	0
≤6	11
≤7	12
≤8	32
≤9	6
≤10	15

CNA

≤1	0
≤2	0
≤3	4
≤4	2
≤5	11
≤6	4
≤7	6
≤8	6
≤9	2
≤10	2

Sprzedawca

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	33
<2k	72
<5k	32
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Wykorzystaj dzisiaj

<1k	136
<2k	1
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Wykorzystaj wielkość rynku

🔴 CTI Zajęcia

Affected Products (22): Boundary (4), Boundary Enterprise (1), Consul (25), Consul Enterprise (23), Consul Template (1), Nomad (27), Nomad Enterprise (26), Packer (1), Sentinel (1), Shared library (1), Terraform (2), Terraform Amazon Web Services (1), Terraform Enterprise (5), Vagrant (1), Vagrant VMware Fusion Plugin (3), Vault (37), Vault Enterprise (43), agrant-vmware-fusion (6), ault-action (1), ault-ssh-helper (1), go-getter (6), go-slug (1)

Opublikowano	Base	Temp	Słaby punkt	Prod	Wyk	Prz	EPSS	CTI	CVE
2024-04-17	8.5	8.4	HashiCorp Shared library privilege escalation	Software Library	Not Defined	Official Fix	0.00043	0.21	CVE-2024-3817
2024-04-04	5.1	5.1	HashiCorp Vault/Vault Enterprise TLS Certificate Privilege Escalation	Nieznany	Not Defined	Official Fix	0.00043	0.02	CVE-2024-2660
2024-03-05	5.9	5.8	HashiCorp Vault/Vault Enterprise TLS Certificate weak authentication	Nieznany	Not Defined	Official Fix	0.00043	0.02	CVE-2024-2048
2024-02-08	6.3	6.3	HashiCorp Nomad/Nomad Enterprise Template Renderer privilege escalation	Nieznany	Not Defined	Official Fix	0.00048	0.03	CVE-2024-1329
2024-02-06	5.8	5.8	HashiCorp Boundary/Boundary Enterprise TLS weak authentication	Nieznany	Not Defined	Official Fix	0.00050	0.02	CVE-2024-1052
2024-02-01	4.5	4.5	HashiCorp Vault/Vault Enterprise Audit Device information disclosure	Nieznany	Not Defined	Not Defined	0.00056	0.02	CVE-2024-0831
2023-12-09	7.5	7.3	HashiCorp Vault/Vault Enterprise HTTP Request denial of service	Nieznany	Not Defined	Official Fix	0.00046	0.02	CVE-2023-6337
2023-11-09	6.4	6.4	HashiCorp Vault/Vault Enterprise Client Request denial of service	Nieznany	Not Defined	Official Fix	0.00046	0.03	CVE-2023-5954
2023-10-28	5.0	4.9	HashiCorp Vagrant Installer privilege escalation	Nieznany	Not Defined	Official Fix	0.00043	0.00	CVE-2023-5834
2023-09-29	3.2	3.1	Hashicorp Vault Enterprise Sentinel Role Governing Policy denial of service	Nieznany	Not Defined	Official Fix	0.00044	0.00	CVE-2023-3775
2023-09-29	6.3	6.3	Hashicorp Vault/Vault Enterprise Google Cloud Secrets Engine privilege escalation	Nieznany	Not Defined	Official Fix	0.00048	0.03	CVE-2023-5077
2023-09-15	4.9	4.9	HashiCorp Vault/Vault Enterprise Transit Secrets Engine privilege escalation	Nieznany	Not Defined	Official Fix	0.00048	0.03	CVE-2023-4680
2023-09-08	6.0	6.0	Hashicorp Terraform directory traversal	Nieznany	Not Defined	Official Fix	0.00044	0.04	CVE-2023-4782
2023-08-09	7.0	6.9	HashiCorp Consul/Consul Enterprise privilege escalation	Nieznany	Not Defined	Official Fix	0.00046	0.00	CVE-2023-3518
2023-08-01	5.3	5.2	HashiCorp Vault/Vault Enterprise LDAP Auth Method information disclosure	Nieznany	Not Defined	Official Fix	0.00046	0.06	CVE-2023-3462
2023-07-28	3.8	3.7	Hashicorp Vault Enterprise denial of service	Nieznany	Not Defined	Official Fix	0.00044	0.02	CVE-2023-3774
2023-07-20	2.8	2.8	HashiCorp Nomad Enterprise information disclosure	Nieznany	Not Defined	Official Fix	0.00045	0.00	CVE-2023-3299
2023-07-20	3.5	3.5	HashiCorp Nomad/Nomad Enterprise privilege escalation	Nieznany	Not Defined	Official Fix	0.00045	0.00	CVE-2023-3072
2023-07-20	5.3	5.2	HashiCorp Nomad/Nomad Enterprise HTTP Search API privilege escalation	Nieznany	Not Defined	Official Fix	0.00052	0.00	CVE-2023-3300
2023-06-09	4.4	4.4	Hashicorp Vault/Vault Enterprise key-value Diff Viewer cross site scripting	Nieznany	Not Defined	Official Fix	0.00045	0.03	CVE-2023-2121
2023-06-03	5.0	5.0	Hashicorp Consul/Consul Enterprise Cluster Peering denial of service	Nieznany	Not Defined	Official Fix	0.00046	0.00	CVE-2023-1297
2023-06-03	6.6	6.6	Hashicorp Consul/Consul Enterprise Proxy privilege escalation	Nieznany	Not Defined	Official Fix	0.00046	0.02	CVE-2023-2816
2023-05-02	2.4	2.4	HashiCorp Vault Enterprise AES weak encryption	Nieznany	Not Defined	Official Fix	0.00043	0.04	CVE-2023-2197
2023-04-06	9.0	8.9	HashiCorp Nomad/Nomad Enterprise privilege escalation	Nieznany	Not Defined	Official Fix	0.00145	0.02	CVE-2023-1782
2023-03-30	5.0	4.9	HashiCorp Vault PKI Mount Issuer Endpoint denial of service	Nieznany	Not Defined	Official Fix	0.00069	0.03	CVE-2023-0665

Hashicorp Luki w zabezpieczeniach

Oś czasu

Rodzaj

Produkt

Przeciwdziałanie

Wykorzystywanie

Wektor dostępu

Uwierzytelnianie

Interakcja z użytkownikiem

C3BM Index

CVSSv3 Base

CVSSv3 Temp

VulDB

NVD

CNA

Sprzedawca

Research

Exploit 0-day

Wykorzystaj dzisiaj

Wykorzystaj wielkość rynku

🔴 CTI Zajęcia

🔒 Login Required

Do you know our Splunk app?