Lucene search
+L

6 matches found

OSV
OSV
added 2026/08/17 5:50 a.m.11 views

BIT-OPENBAO-2026-46358 OpenBao's Inline Auth Incorrectly Redacted Headers

OpenBao is an open source identity-based secrets management system. Prior to version 2.5.4, OpenBao's inline auth functionality incorrectly redacted audit log entries, resulting in non-auth headers being removed and auth-related headers being retained in cleartext. This requires an attacker to...

5.4CVSS8.7AI score0.00227EPSS
SaveExploits0References6
Rows per page
Query Builder