Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:25661
HistoryJun 11, 2020 - 8:13 a.m.

Insecure Access Control

2020-06-1108:13:20
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11

0.002 Low

EPSS

Percentile

64.7%

github.com/hashicorp/vault-plugin-secrets-gcp uses an insecure access control. Service account keys does not honor the secret engines configured with default TTL, allowing an attacker to gain unauthorized access.

0.002 Low

EPSS

Percentile

64.7%