Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Vault Enterprise clusters using the tokenization transform feature can expose the tokenization key through the tokenization key configuration endpoint to authorized operators with `read` permissions on this endpoint. Fixed in Vault Enterprise 1.9.4, 1.8.9 and 1.7.10.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
HashiCorp Vault 安全漏洞
Vulnerability Description
Hashicorp HashiCorp Vault是美国HashiCorp（Hashicorp）公司的一款私钥访问管理工具。 HashiCorp Vault Enterprise 存在安全漏洞，该漏洞源于Vault Enterprise集群通过令牌化密钥配置端点向在该端点上具有“读取”权限的操作员公开令牌化密钥。该漏洞在Vault Enterprise 1.9.4版本、1.8.9版本和 1.7.10版本中已修复。
CVSS Information
N/A
Vulnerability Type
N/A