Lucene search

K
prionPRIOn knowledge basePRION:CVE-2020-12757
HistoryJun 10, 2020 - 7:15 p.m.

Denial of service

2020-06-1019:15:00
PRIOn knowledge base
www.prio-n.com
8

9.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.7%

HashiCorp Vault and Vault Enterprise 1.4.0 and 1.4.1, when configured with the GCP Secrets Engine, may incorrectly generate GCP Credentials with the default time-to-live lease duration instead of the engine-configured setting. This may lead to generated GCP credentials being valid for longer than intended. Fixed in 1.4.2.

CPENameOperatorVersion
vaultge1.4.0
vaultlt1.4.2
vaultge1.4.0
vaultlt1.4.2

9.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.7%