VDB
WID-SEC-W-2023-1928
WID-SEC-W-2023-1928
PUBLISHED
Vault ist ein identitätsbasiertes System zur Verwaltung von Geheimnissen und Verschlüsselung.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Hashicorp Vault 1.14.1 | ||
| Hashicorp Vault 1.13.5 | ||
| Hashicorp Vault <1.14.1 | ||
| Red Hat Enterprise Linux | ||
| Hashicorp Vault <1.13.5 |
Timeline
- Jul 31, 2023 CVE Published
- Oct 15, 2024 CVE Updated
- Apr 2, 2026 Distribution Patch
- Apr 2, 2026 Distribution Patch
References
- https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-1928.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-1928 advisory
- https://discuss.hashicorp.com/t/hcsec-2023-24-vaults-ldap-auth-method-allows-for-user-enumeration/56714 url
- https://access.redhat.com/errata/RHSA-2024:7599 url
- https://access.redhat.com/errata/RHSA-2024:7922 url