HashiCorp Vault and Vault Enterprise 1.4.1 and newer allowed the enumeration of users via the LDAP auth method. Fixed in 1.5.6 and 1.6.1.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2020-12-17T04:17:27
Updated: 2024-08-04T17:02:06.823Z
Reserved: 2020-12-11T00:00:00
Link: CVE-2020-35177
Vulnrichment
No data.
NVD
Status : Modified
Published: 2020-12-17T05:15:10.737
Modified: 2024-11-21T05:26:54.477
Link: CVE-2020-35177
Redhat