ROS-20240805-04

🗓️ 05 Aug 2024 00:00:00Reported by RedosType

Vulnerabilities in HashiCorp Vault and Vault Enterprise information archiving platforms related to authentication, resource allocation, TLS validation, permissions, and memory error

Reporter	Title	Published	Views	Family All 124
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM CloudPak for AIOps	26 Mar 202503:49	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM CloudPak for AIOps	27 Mar 202420:12	–	ibm
AlpineLinux	CVE-2023-5077	29 Sep 202300:15	–	alpinelinux
Tenable Nessus	Azure Linux 3.0 Security Update: cert-manager (CVE-2023-6337)	22 Jan 202600:00	–	nessus
BDU FSTEC	The vulnerability of HashiCorp’s Vault and Vault Enterprise storage platforms, related to memory leak errors, allows attackers to trigger service interruptions.	24 Nov 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `max_request_duration` component in the platform for archiving corporate information, HashiCorp Vault and Vault Enterprise, allows a perpetrator to trigger a service failure.	13 Dec 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of HashiCorp’s Vault and Vault Enterprise archiving platforms relates to errors in the certificate validation process. This allows attackers to bypass the authentication process.	18 Mar 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the TLS certificate verification component of HashiCorp Vault and Vault Enterprise, a platform for archiving corporate information, allows a perpetrator to bypass the authentication process.	22 Apr 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of HashiCorp’s Vault and Vault Enterprise archiving platforms for corporate information lies in the improper assignment of permissions to critical resources, allowing attackers to increase their privileges.	7 Aug 202400:00	–	bdu_fstec
CBLMariner	CVE-2023-6337 affecting package cert-manager for versions less than 1.12.12-1	25 Aug 202415:13	–	cbl_mariner