Lucene search
+L

7 matches found

OSV
OSV
•added 2025/05/07 5:56 a.m.•76 views

BIT-VAULT-2025-3879 Vault’s Azure Authentication Method bound_location Restriction Could be Bypassed on Login

Vault Community, Vault Enterprise “Vault” Azure Auth method did not correctly validate the claims in the Azure-issued token, resulting in the potential bypass of the boundlocations parameter on login. Fixed in Vault Community Edition 1.19.1 and Vault Enterprise 1.19.1, 1.18.7, 1.17.14, 1.16.18...

8.8CVSS6.5AI score0.00438EPSS
SaveExploits0References2
Rows per page
Query Builder