Vulnetix
Try Vulnetix Request Demo
CVE-2024-9180 PUBLISHED

A privileged Vault operator with write permissions to the root namespace’s identity endpoint could escalate their own or another user’s privileges to Vault’s root policy. Fixed in Vault Community Edition 1.18.0 and Vault Enterprise 1.18.0, 1.17.7, 1.16.11, and 1.15.16.

EPSS 0.30% · 53.3th percentile

Risk Scores

EPSS Score
0.30%
53.3th percentile

Affected Products

VendorProductVersions
Bitnamivault1.7.7
Bitnamivault1.7.7

Timeline

References

Open in Interactive Console →