CVE-2019-18616

HashiCorp Vault Enterprise has an Insecure Session Management issue where revoking a token scoped to a non-root namespace does not correctly revoke the dynamic secret leases associated with that token.