Lucene search
+L

1 matches found

OSV
OSV
added 2025/08/08 2:38 p.m.21 views

GHSA-J3XV-7FXP-GFHX OpenBao Userpass and LDAP User Lockout Bypass

Impact Attackers could bypass the automatic user lockout mechanisms in the OpenBao Userpass or LDAP auth systems. This was caused by different aliasing between pre-flight and full login request user entity alias attributions. Patches OpenBao v2.3.2 will patch this issue. Workarounds Existing user...

5.3CVSS6.8AI score0.00211EPSS
SaveExploits0References6
Rows per page
Query Builder