Lucene search
Veracode Vulnerability DatabaseVERACODE:28636HistoryDec 18, 2020 - 8:40 a.m.
Information Disclosure
2020-12-1808:40:42
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.001 Low
EPSS
Percentile
38.9%
github.com/hashicorp/vault is vulnerable to information disclosure. The vulnerability is possible because the error messages returned by the LDAP auth methold allows user enumeration.
Related
freebsd
freebsd
vault -- User Enumeration via LDAP auth
2020-12-16 00:00:00
prion
prion
Denial of service
2020-12-17 05:15:00
nessus
nessus
osv
osv
BIT-vault-2020-35177
2024-03-06 11:11:22
CVE-2020-35177
2020-12-17 05:15:10
Enumeration of users in HashiCorp Vault
2024-01-31 23:11:40
nvd
nvd
CVE-2020-35177
2020-12-17 05:15:10
alpinelinux
alpinelinux
CVE-2020-35177
2020-12-17 05:15:10
github
github
Enumeration of users in HashiCorp Vault
2024-01-31 23:11:40
cve
cve
CVE-2020-35177
2020-12-17 05:15:10
cvelist
cvelist
CVE-2020-35177
2020-12-17 04:17:27
redhatcve
redhatcve
CVE-2020-35177
2021-04-23 19:13:42