Skip to content
OpenAdvisories

Package · Go

github.com/hashicorp/vault-plugin-secrets-gcp

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    CVE-2020-12757

    Improper Input Validation in HashiCorp Vault

    HashiCorp Vault and Vault Enterprise 1.4.0 and 1.4.1, when configured with the GCP Secrets Engine, may incorrectly generate GCP Credentials with the default time-to-live lease duration instead of the engine-configured setting. This may lead to generated GCP c…

    github.com/hashicorp/vault-plugin-secrets-gcp Go