Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization in the requirerequestheader process. An attacker can cause the Agent and Proxy services to shut down by sending requests to /agent/v1/quit or /proxy/v1/quit endpoints without the required header via server-side...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization in the requirerequestheader process. An attacker can cause the Agent and Proxy services to shut down by sending requests to /agent/v1/quit or /proxy/v1/quit endpoints without the required header via server-side...

OpenBao authorization issue vulnerability

Versions prior to OpenBao 2.6.3 contain an authorization issue vulnerability. This vulnerability stems from a lack of authorization checks; attackers can exploit it by omitting the X-Vault-Header and sending requests to /agent/v1/quit or /proxy/v1/quit via server-side request forgery. This may...