Skip to content
OpenAdvisories

Package · Go

github.com/hashicorp/terraform-provider-vault

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.4
    CVE-2025-13357

    Vault Terraform Provider Applied Incorrect Defaults for LDAP Auth Method

    Vault’s Terraform Provider incorrectly set the default deny_null_bind parameter for the LDAP auth method to false by default, potentially resulting in an insecure configuration. If the underlying LDAP server allowed anonymous or unauthenticated binds, this co…

    HashiCorp Tooling github.com/hashicorp/terraform-provider-vault Go