CVE-2020-16250

HashiCorp Vault and Vault Enterprise versions 0.7.1 and newer, when configured with the AWS IAM auth method, may be vulnerable to authentication bypass

published August 26, 2020

CVSS
—
EPSS
2%
Percentile
74.3
In the wild
Unconfirmed
What it is

HashiCorp Vault and Vault Enterprise versions 0.7.1 and newer, when configured with the AWS IAM auth method, may be vulnerable to authentication bypass. Fixed in 1.2.5, 1.3.8, 1.4.4, and 1.5.1..

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01508 · 74.3th percentile
Published
2020-08-26T14:17Z
EPSS history
Timeline
  • 26 AUG 14:17Z
    HashiCorp Vault and Vault Enterprise versions 0.7.1 and newer, when configured with the AWS IAM auth method, may be vulnerable to authentication bypass
    cvelistv5