Vulnetix
Try Vulnetix Request Demo
CVE-2020-16250 PUBLISHED

HashiCorp Vault and Vault Enterprise versions 0.7.1 and newer, when configured with the AWS IAM auth method, may be vulnerable to authentication bypass. Fixed in 1.2.5, 1.3.8, 1.4.4, and 1.5.1..

EPSS 2.36% · 84.8th percentile

Risk Scores

EPSS Score
2.36%
84.8th percentile

Affected Products

VendorProductVersions
Bitnamivault1.5.0, 1.3.0, 0.7.1
Bitnamivault0.7.1, 1.3.0, 1.4.0

Timeline

References

Open in Interactive Console →