漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Vault Operators in Root Namespace May Elevate Their Privileges
Vulnerability Description
A privileged Vault operator with write permissions to the root namespace’s identity endpoint could escalate their own or another user’s privileges to Vault’s root policy. Fixed in Vault Community Edition 1.18.0 and Vault Enterprise 1.18.0, 1.17.7, 1.16.11, and 1.15.16.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
特权授予不正确
Vulnerability Title
Vault Community Edition和Vault Enterprise 安全漏洞
Vulnerability Description
HashiCorp Vault Enterprise和HashiCorp Vault Community Edition都是美国HashiCorp公司的产品。HashiCorp Vault Enterprise是一个企业信息归档平台。HashiCorp Vault Community Edition是一款密钥管理引擎。用来集中存储集群运行过程中所需要的秘密信息。 Vault Community Edition和Vault Enterprise存在安全漏洞，该漏洞源于具有对根命名空间身份端点写入权限的特权操
CVSS Information
N/A
Vulnerability Type
N/A