CVE-2024-6468

A flaw was found in HashiCorp Vault. Affected versions of the Vault did not properly handle requests originating from unauthorized IP addresses when the TCP listener option, proxyprotocolbehavior, was set to denyunauthorized. When receiving a request from a source IP address not listed in...

CVE-2024-6468

creationtimestamp| type| source ---|---|--- 2024-07-12 00:11:01+00:00| seen| https://t.me/cvedetector/696...

CVE-2024-6468

Vault and Vault Enterprise did not properly handle requests originating from unauthorized IP addresses when the TCP listener option, proxyprotocolbehavior, was set to denyunauthorized. When receiving a request from a source IP address that was not listed in proxyprotocolauthorizedaddrs, the Vault...

CVE-2024-6468 vulnerabilities

Vulnerabilities for packages: vault...

CVE-2024-6468 Vault Vulnerable to Denial of Service When Setting a Proxy Protocol Behavior

Vault and Vault Enterprise did not properly handle requests originating from unauthorized IP addresses when the TCP listener option, proxyprotocolbehavior, was set to denyunauthorized. When receiving a request from a source IP address that was not listed in proxyprotocolauthorizedaddrs, the Vault...

CVE-2024-6468 Vault Vulnerable to Denial of Service When Setting a Proxy Protocol Behavior

Vault and Vault Enterprise did not properly handle requests originating from unauthorized IP addresses when the TCP listener option, proxyprotocolbehavior, was set to denyunauthorized. When receiving a request from a source IP address that was not listed in proxyprotocolauthorizedaddrs, the Vault...

CVE-2024-6468

CVE-2024-6468 affects HashiCorp Vault and Vault Enterprise. When the TCP listener option proxy_protocol_behavior is set to deny_unauthorized, requests from source IPs not listed in proxy_protocol_authorized_addrs could cause the Vault API server to shut down and stop responding, potentially resul...