Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
HashiCorp Vault and Vault Enterprise allowed the renewal of nearly-expired token leases and dynamic secret leases (specifically, those within 1 second of their maximum TTL), which caused them to be incorrectly treated as non-expiring during subsequent use. Fixed in 1.5.9, 1.6.5, and 1.7.2.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
HashiCorp Vault 和 Vault Enterprise 代码问题漏洞
Vulnerability Description
Hashicorp HashiCorp Vault是美国HashiCorp（Hashicorp）公司的一款私钥访问管理工具。 HashiCorp Vault和Vault Enterprise存在安全漏洞，该漏洞允许对即将过期的令牌租期和动态秘密租期(特别是在最大TTL 1秒内的那些)进行更新，这导致在后续使用中被错误地视为未过期。
CVSS Information
N/A
Vulnerability Type
N/A