HashiCorp Vault and Vault Enterprise versions 1.0 and newer allowed leases created with a batch token to outlive their TTL because expiration time was not scheduled correctly. Fixed in 1.4.7 and 1.5.4.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2020-09-30T19:44:01
Updated: 2024-08-04T15:40:36.981Z
Reserved: 2020-09-23T00:00:00
Link: CVE-2020-25816
Vulnrichment
No data.
NVD
Status : Modified
Published: 2020-09-30T20:15:15.653
Modified: 2024-11-21T05:18:49.910
Link: CVE-2020-25816
Redhat