ROS-20240805-04

Vulnerability in HashiCorp Vault and Vault Enterprise enterprise information archiving platforms
is related to errors in the certificate authentication procedure. Exploitation of the vulnerability could
allow an attacker acting remotely to bypass the authentication process

Vulnerability in the max_request_duration component of the HashiCorp Enterprise Information Archiving Platforms
Vault and Vault Enterprise platforms is related to unlimited resource allocation when processing HTTP requests.
Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service

Vulnerability in the TLS protocol validation component of enterprise information archiving platforms
HashiCorp Vault and Vault Enterprise is related to incorrect handling of exceptional states.
Exploitation of the vulnerability could allow an attacker to bypass the authentication process

Vulnerability of HashiCorp Vault and Vault Enterprise enterprise information archiving platforms
is related to incorrect assignment of permissions for a critical resource. Exploitation of the vulnerability could
allow a remote attacker to escalate privileges

Vulnerability in HashiCorp Vault and Vault Enterprise enterprise information archiving platforms
is related to memory freeing errors. Exploitation of the vulnerability could allow a remote attacker to cause a denial of service.
remotely to cause a denial of service