vault-java-driver vulnerabilities
1 known vulnerability in vault-java-driver from Jopenlibs. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.4average CVSS score
Latest first
- 7.4 High severity
vault-java-driver: Improper Certificate Validation
vault-java-driver, a Java client for HashiCorp Vault, silently disables TLS certificate and hostname verification in three states where the caller asked for verification: an SslConfig passed to VaultConfig without calling build(), an SslConfig restored by Java