CVE-2020-35453

HashiCorp Vault Enterprise’s Sentinel EGP policy feature incorrectly allowed requests to be processed in parent and sibling namespaces

published December 17, 2020

CVSS
—
EPSS
1%
Percentile
56.8
In the wild
Unconfirmed
What it is

HashiCorp Vault Enterprise’s Sentinel EGP policy feature incorrectly allowed requests to be processed in parent and sibling namespaces. Fixed in 1.5.6 and 1.6.1.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00819 · 56.8th percentile
Published
2020-12-17T04:22Z
EPSS history
Timeline
  • 17 DEC 04:22Z
    HashiCorp Vault Enterprise’s Sentinel EGP policy feature incorrectly allowed requests to be processed in parent and sibling namespaces
    cvelistv5