Skip to content
OpenAdvisories

Package · Alpine

vault

16 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2022-41316

    HashiCorp Vault's revocation list not respected

    HashiCorp Vault and Vault Enterprise’s TLS certificate auth method did not initially load the optionally configured CRL issued by the role's CA into memory on startup, resulting in the revocation list not being checked if the CRL has not yet been retrieved. F…

    github.com/hashicorp/vault vault Alpine Go
  • Medium 5.3
    CVE-2021-38554

    Improper Removal of Sensitive Information Before Storage or Transfer in HashiCorp Vault

    HashiCorp Vault and Vault Enterprise’s UI erroneously cached and exposed user-viewed secrets between sessions in a single shared browser. Fixed in 1.8.0 and pending 1.7.4 / 1.6.6 releases.

    github.com/hashicorp/vault vault Alpine Go
  • Medium 6.5
    CVE-2020-35177

    Enumeration of users in HashiCorp Vault

    HashiCorp Vault and Vault Enterprise 1.4.1 and newer allowed the enumeration of users via the LDAP auth method. Fixed in 1.5.6 and 1.6.1.

    github.com/hashicorp/vault vault Alpine Go