Lucene search
GoogleOSV:GHSA-38J9-7PP9-2HJWHistoryJun 08, 2021 - 6:52 p.m.
Invalid session token expiration
2021-06-0818:52:05
Google
osv.dev
5
session token expiration
hashicorp vault
software bug fix
EPSS
0.002
Percentile
52.8%
HashiCorp Vault and Vault Enterprise allowed the renewal of nearly-expired token leases and dynamic secret leases (specifically, those within 1 second of their maximum TTL), which caused them to be incorrectly treated as non-expiring during subsequent use. Fixed in 1.5.9, 1.6.5, and 1.7.2.
Related
osv
osv
CGA-wx3f-474r-689w
2024-06-06 12:29:51
Invalid session token expiration in github.com/hashicorp/vault
2024-08-21 15:11:40
CVE-2021-32923
2021-06-03 11:15:08
prion
prion
Denial of service
2021-06-03 11:15:00
github
github
Invalid session token expiration
2021-06-08 18:52:05
cve
cve
CVE-2021-32923
2021-06-03 11:15:08
cgr
cgr
CVE-2021-32923 vulnerabilities
2024-05-19 03:07:16
cvelist
cvelist
CVE-2021-32923
2021-06-03 10:38:26
nvd
nvd
CVE-2021-32923
2021-06-03 11:15:08
veracode
veracode
Insecure Session Management
2021-05-26 06:44:13
alpinelinux
alpinelinux
CVE-2021-32923
2021-06-03 11:15:08
redhatcve
redhatcve
CVE-2021-32923
2021-06-04 18:43:21
cbl_mariner
cbl_mariner
CVE-2021-32923 affecting package keda for versions less than 2.14.0-1
2024-07-22 15:42:40
wolfi
wolfi
CVE-2021-32923 vulnerabilities
2024-09-30 09:32:54
nessus
nessus
GLSA-202207-01 : HashiCorp Vault: Multiple Vulnerabilities
2022-08-02 00:00:00
gentoo
gentoo
HashiCorp Vault: Multiple Vulnerabilities
2022-07-29 00:00:00