Lucene search
Alpine Linux Development TeamALPINE:CVE-2021-32923HistoryJun 03, 2021 - 11:15 a.m.
CVE-2021-32923
2021-06-0311:15:00
Alpine Linux Development Team
security.alpinelinux.org
14
0.002 Low
EPSS
Percentile
52.4%
HashiCorp Vault and Vault Enterprise allowed the renewal of nearly-expired token leases and dynamic secret leases (specifically, those within 1 second of their maximum TTL), which caused them to be incorrectly treated as non-expiring during subsequent use. Fixed in 1.5.9, 1.6.5, and 1.7.2.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | 3.13-community | noarch | vault | < 1.5.9-r0 | UNKNOWN |
| Alpine | 3.14-community | noarch | vault | < 1.7.2-r0 | UNKNOWN |
| Alpine | 3.15-community | noarch | vault | < 1.7.2-r0 | UNKNOWN |
| Alpine | 3.16-community | noarch | vault | < 1.7.2-r0 | UNKNOWN |
| Alpine | 3.17-community | noarch | vault | < 1.7.2-r0 | UNKNOWN |
| Alpine | 3.18-community | noarch | vault | < 1.7.2-r0 | UNKNOWN |
Related
prion
prion
Denial of service
2021-06-03 11:15:00
cve
cve
CVE-2021-32923
2021-06-03 11:15:00
github
github
Invalid session token expiration
2021-06-08 18:52:05
osv
osv
CVE-2021-32923
2021-06-03 11:15:08
Invalid session token expiration
2021-06-08 18:52:05
BIT-vault-2021-32923
2024-03-06 11:10:47
cvelist
cvelist
CVE-2021-32923
2021-06-03 10:38:26
veracode
veracode
Insecure Session Management
2021-05-26 06:44:13
cgr
cgr
CVE-2021-32923 vulnerabilities
2024-05-19 03:07:16
redhatcve
redhatcve
CVE-2021-32923
2021-06-04 18:43:21
wolfi
wolfi
CVE-2021-32923 vulnerabilities
2024-05-19 21:07:16
nessus
nessus
GLSA-202207-01 : HashiCorp Vault: Multiple Vulnerabilities
2022-08-02 00:00:00
gentoo
gentoo
HashiCorp Vault: Multiple Vulnerabilities
2022-07-29 00:00:00