Lucene search
GoogleOSV:CVE-2020-25816HistorySep 30, 2020 - 8:15 p.m.
CVE-2020-25816
2020-09-3020:15:15
Google
osv.dev
4
HashiCorp Vault and Vault Enterprise versions 1.0 and newer allowed leases created with a batch token to outlive their TTL because expiration time was not scheduled correctly. Fixed in 1.4.7 and 1.5.4.
| CPE | Name | Operator | Version |
|---|---|---|---|
| vault | eq | 1.0.1 | |
| vault | eq | 1.2.0-rc1 | |
| vault | eq | sdk/v0.1.9 | |
| vault | eq | 1.0.3 | |
| vault | eq | 1.0.2 | |
| vault | eq | 1.5.2 | |
| vault | eq | sdk/v0.1.12 | |
| vault | eq | sdk/v0.1.10 | |
| vault | eq | 1.1.0-beta1 | |
| vault | eq | 1.1.0-beta2 |
Related
nvd
nvd
CVE-2020-25816
2020-09-30 20:15:15
redhatcve
redhatcve
CVE-2020-25816
2023-04-25 14:21:40
github
github
Token leases could outlive their TTL in HashiCorp Vault
2022-05-24 22:01:23
alpinelinux
alpinelinux
CVE-2020-25816
2020-09-30 20:15:15
cvelist
cvelist
CVE-2020-25816
2020-09-30 19:44:01
veracode
veracode
Insecure Access Control
2020-10-01 05:41:25
cve
cve
CVE-2020-25816
2020-09-30 20:15:15
ibm
ibm
prion
prion
Denial of service
2020-09-30 20:15:00
osv
osv
BIT-vault-2020-25816
2024-03-06 11:11:25
Token leases could outlive their TTL in HashiCorp Vault
2022-05-24 22:01:23