vault_community_edition vulnerabilities

1 known vulnerability in vault_community_edition from HashiCorp. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Vault: Incorrect Permission Assignment for Critical Resource

  CVE-2024-7594Sep 26, 2024HashiCorp

  Vault’s SSH secrets engine did not require the valid_principals list to contain a value by default. If the valid_principals and default_user fields of the SSH secrets engine configuration are not set, an SSH certificate requested by an authorized user to Vault