CVE-2022-25244

Vault Enterprise clusters using the tokenization transform feature can expose the tokenization key through the tokenization key configuration endpoint to…

published March 7, 2022

CVSS
—
EPSS
1%
Percentile
61.0
In the wild
Unconfirmed
What it is

Vault Enterprise clusters using the tokenization transform feature can expose the tokenization key through the tokenization key configuration endpoint to authorized operators with `read` permissions on this endpoint. Fixed in Vault Enterprise 1.9.4, 1.8.9 and 1.7.10.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00953 · 61.0th percentile
Published
2022-03-07T21:41Z
EPSS history
Timeline
  • 07 MAR 21:41Z
    Vault Enterprise clusters using the tokenization transform feature can expose the tokenization key through the tokenization key configuration endpoint to…
    cvelistv5