Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
HashiCorp Vault Enterprise 0.9.2 through 1.6.2 allowed the read of license metadata from DR secondaries without authentication. Fixed in 1.6.3.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
HashiCorp Vault 访问控制错误漏洞
Vulnerability Description
Hashicorp HashiCorp Vault是美国Hashicorp公司的一款私钥访问管理工具。 HashiCorp Vault Enterprise 中存在访问控制错误漏洞，该漏洞源于产品在从DR secondaries读取许可证元数据时缺少权限验证。攻击者可通过该漏洞直接访问敏感数据。以下产品及版本受到影响：HashiCorp Vault Enterprise 0.9.2 至 1.6.2版本。
CVSS Information
N/A
Vulnerability Type
N/A