The vulnerability of OpenBao’s secret and encryption management system, related to improper handling of vulnerabilities, allows attackers to circumvent existing security restrictions.

The vulnerability of the OpenBao encryption and secret management system lies in the improper handling of gaps during the processing of the parameter usernameasalias=true in the LDAP authentication method. Exploiting this vulnerability allows a malicious actor to circumvent existing security...