CVE-2020-10660

HashiCorp Vault and Vault Enterprise versions 0.9.0 through 1.3.3 may, under certain circumstances, have an Entity's Group membership inadvertently include…

published March 23, 2020

CVSS
—
EPSS
1%
Percentile
54.9
In the wild
Unconfirmed
What it is

HashiCorp Vault and Vault Enterprise versions 0.9.0 through 1.3.3 may, under certain circumstances, have an Entity's Group membership inadvertently include Groups the Entity no longer has permissions to. Fixed in 1.3.4.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00763 · 54.9th percentile
Published
2020-03-23T12:55Z
EPSS history
Timeline
  • 23 MAR 12:55Z
    HashiCorp Vault and Vault Enterprise versions 0.9.0 through 1.3.3 may, under certain circumstances, have an Entity's Group membership inadvertently include…
    cvelistv5