CVE-2020-35177

HashiCorp Vault and Vault Enterprise 1.4.1 and newer allowed the enumeration of users via the LDAP auth method. Fixed in 1.5.6 and 1.6.1...

CVE-2020-35177

HashiCorp Vault and Vault Enterprise 1.4.1 and newer allowed the enumeration of users via the LDAP auth method. Fixed in 1.5.6 and 1.6.1...

CVE-2020-35177

CVE-2020-35177 affects HashiCorp Vault and Vault Enterprise; versions 1.4.1 and later allowed user enumeration through the LDAP authentication method. The issue is mitigated by upgrading to 1.5.6 or 1.6.1, which fix the vulnerability. The available connected documents confirm the vulnerability is...

Vault’s LDAP Auth Method Allows User Enumeration

Summary Vault and Vault Enterprise “Vault” allowed enumeration of users via the LDAP auth method. This vulnerability, CVE-2020-35177, was introduced in Vault 1.4.1 and fixed in Vault 1.6.1 and 1.5.6. Background The Vault LDAP auth method documented at LDAP - Auth Methods | Vault by HashiCorp allo...

bed-and-breakfast.it XSS vulnerability

Vulnerable URL: https://www.bed-and-breakfast.it/it/venezia?checkin=31/07/2017=11/08/2017=%22%20onfocus=%22prompt%27OPENBUGBOUNTY%27%22%20autofocus=%22 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 35177 VIP...