CVE-2020-35177

HashiCorp Vault and Vault Enterprise 1.4.1 and newer allowed the enumeration of users via the LDAP auth method

published December 17, 2020

CVSS
—
EPSS
1%
Percentile
70.3
In the wild
Unconfirmed
What it is

HashiCorp Vault and Vault Enterprise 1.4.1 and newer allowed the enumeration of users via the LDAP auth method. Fixed in 1.5.6 and 1.6.1.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01305 · 70.3th percentile
Published
2020-12-17T04:17Z
EPSS history
Timeline
  • 17 DEC 04:17Z
    HashiCorp Vault and Vault Enterprise 1.4.1 and newer allowed the enumeration of users via the LDAP auth method
    cvelistv5