Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
HashiCorp Vault and Vault Enterprise versions 0.7.1 and newer, when configured with the AWS IAM auth method, may be vulnerable to authentication bypass. Fixed in 1.2.5, 1.3.8, 1.4.4, and 1.5.1..
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
HashiCorp Vault 和 Vault Enterprise 授权问题漏洞
Vulnerability Description
HashiCorp Vault是美国HashiCorp公司的一款私钥访问管理工具。 HashiCorp Vault和Vault Enterprise 0.7.1版本及更高版本AWS IAM授权配置存在授权问题漏洞，攻击者借助该漏洞可能绕过身份验证。
CVSS Information
N/A
Vulnerability Type
N/A