Lucene search

K
cvelistMitreCVELIST:CVE-2020-16250
HistoryAug 26, 2020 - 2:17 p.m.

CVE-2020-16250

2020-08-2614:17:44
mitre
www.cve.org
6
hashicorp; vault; aws iam; authentication bypass; cve-2020-16250; vulnerability; fixed; versions; 0.7.1; 1.2.5; 1.3.8; 1.4.4; 1.5.1

AI Score

8.2

Confidence

High

EPSS

0.003

Percentile

69.5%

HashiCorp Vault and Vault Enterprise versions 0.7.1 and newer, when configured with the AWS IAM auth method, may be vulnerable to authentication bypass. Fixed in 1.2.5, 1.3.8, 1.4.4, and 1.5.1…

AI Score

8.2

Confidence

High

EPSS

0.003

Percentile

69.5%