Skip to content
OpenAdvisories

Package · Go

github.com/hashicorp/vault-ssh-helper

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2020-24359

    Improper Input Validation in vault-ssh-helper

    HashiCorp vault-ssh-helper up to and including version 0.1.6 incorrectly accepted Vault-issued SSH OTPs for the subnet in which a host's network interface was located, rather than the specific IP address assigned to that interface. Fixed in 0.2.0.

    github.com/hashicorp/vault-ssh-helper Go