Lucene search
MitreCVELIST:CVE-2021-43998HistoryNov 30, 2021 - 2:59 p.m.
CVE-2021-43998
2021-11-3014:59:08
mitre
www.cve.org
2
HashiCorp Vault and Vault Enterprise 0.11.0 up to 1.7.5 and 1.8.4 templated ACL policies would always match the first-created entity alias if multiple entity aliases exist for a specified entity and mount combination, potentially resulting in incorrect policy enforcement. Fixed in Vault and Vault Enterprise 1.7.6, 1.8.5, and 1.9.0.
Related
nvd
nvd
CVE-2021-43998
2021-11-30 15:15:07
redhatcve
redhatcve
CVE-2021-43998
2023-02-06 03:56:00
osv
osv
HashiCorp Vault Incorrect Permission Assignment for Critical Resource
2021-12-02 17:48:30
CVE-2021-43998
2021-11-30 15:15:07
BIT-vault-2021-43998
2024-03-06 11:10:23
prion
prion
Design/Logic Flaw
2021-11-30 15:15:00
github
github
HashiCorp Vault Incorrect Permission Assignment for Critical Resource
2021-12-02 17:48:30
veracode
veracode
Privilege Escalation
2021-12-03 03:10:51
cve
cve
CVE-2021-43998
2021-11-30 15:15:07
redhat
redhat
gentoo
gentoo
HashiCorp Vault: Multiple Vulnerabilities
2022-07-29 00:00:00
nessus
nessus
GLSA-202207-01 : HashiCorp Vault: Multiple Vulnerabilities
2022-08-02 00:00:00