CVE-2020-35177

Publication date

2020-12-17 04:17:27

Family

mitre

State

PUBLISHED

Description

HashiCorp Vault and Vault Enterprise 1.4.1 and newer allowed the enumeration of users via the LDAP auth method. Fixed in 1.5.6 and 1.6.1.