2 matches found
CVE-2020-16250
HashiCorp Vault and Vault Enterprise versions 0.7.1 and newer, when configured with the AWS IAM auth method, may be vulnerable to authentication bypass. Fixed in 1.2.5, 1.3.8, 1.4.4, and 1.5.1...
8.8CVSS0.01508EPSS
SaveExploits0References7
CVE-2020-16250: Authentication Bypass by Spoofing
HashiCorp Vault and Vault Enterprise versions 0.7.1 and newer, when configured with the AWS IAM auth method, may be vulnerable to authentication bypass. Fixed in 1.2.5, 1.3.8, 1.4.4, and 1.5.1...
8.2CVSS5.7AI score0.01508EPSS
SaveExploits0References3
20