HashiCorp Vault and Vault Enterprise versions 0.11.0 through 1.3.3 may, under certain circumstances, have existing nested-path policies grant access to Namespaces created after-the-fact. Fixed in 1.3.4.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2020-03-23T12:57:03
Updated: 2024-08-04T11:06:10.651Z
Reserved: 2020-03-18T00:00:00
Link: CVE-2020-10661
Vulnrichment
No data.
NVD
Status : Modified
Published: 2020-03-23T13:15:13.190
Modified: 2024-11-21T04:55:47.517
Link: CVE-2020-10661
Redhat