Lucene search

K
osvGoogleOSV:CVE-2020-35177
HistoryDec 17, 2020 - 5:15 a.m.

CVE-2020-35177

2020-12-1705:15:10
Google
osv.dev
4

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

38.9%

HashiCorp Vault and Vault Enterprise 1.4.1 and newer allowed the enumeration of users via the LDAP auth method. Fixed in 1.5.6 and 1.6.1.

CPENameOperatorVersion
vaulteq1.6.0

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

38.9%