Beveiligingsadvies

CVE-2023-3462

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-07-31 22:40:23

Laatst bijgewerkt 2024-10-21 18:04:40

Toegewezen door HashiCorp

CVSS-score 5.3

Status PUBLISHED

Beschrijving

HashiCorp's Vault and Vault Enterprise are vulnerable to user enumeration when using the LDAP auth method. An attacker may submit requests of existent and non-existent LDAP users and observe the response from Vault to check if the account is valid on the LDAP server. This vulnerability is fixed in Vault 1.14.1 and 1.13.5.

← Alle CVE's bekijken Bekijk op cve.org ↗