Home

CVE-2020-35177

Description

HashiCorp Vault and Vault Enterprise 1.4.1 and newer allowed the enumeration of users via the LDAP auth method. Fixed in 1.5.6 and 1.6.1.

Risk Information

Base Score
5.3
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS Score
Exploitation Probability
0.395

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2020-35177,CVE-2020-35453 are affected in HashiCorp Vault Enterprise 1.5.5Windows
Vulnerabilities CVE-2020-35177,CVE-2020-35453,CVE-2021-3282 are affected in HashiCorp Vault Enterprise 1.6.0Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234