Vulnetix
Try Vulnetix Request Demo
CVE-2022-41316 PUBLISHED

HashiCorp Vault and Vault Enterprise’s TLS certificate auth method did not initially load the optionally configured CRL issued by the role's CA into memory on startup, resulting in the revocation list not being checked if the CRL has not yet been retrieved. Fixed in 1.12.0, 1.11.4, 1.10.7, and 1.9.10.

EPSS 0.19% · 41.3th percentile

Risk Scores

EPSS Score
0.19%
41.3th percentile

Affected Products

VendorProductVersions
Bitnamivault0, 1.10.0, 1.11.0
Bitnamivault0, 1.10.0, 1.11.0

Timeline

References

Open in Interactive Console →