Go/github.com/hashicorp/vault CVE-2021-41802: low 2.9, EPSS 0.61%
Hashicorp Vault Privilege Escalation Vulnerability
Action: Upgrade github.com/hashicorp/vault to 1.7.5 or later.
go get github.com/hashicorp/vault@v1.7.5go get github.com/hashicorp/vault@v1.8.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.7.5 | - |
| 1.8.0 | 1.8.4 | - |
Fixed versions
| 1.7.5 | 1.8.4 |
Sources
- osv: GHSA-qv95-g3gm-x542
- https://nvd.nist.gov/vuln/detail/CVE-2021-41802
- https://discuss.hashicorp.com/t/hcsec-2021-27-vault-merging-multiple-entity-aliases-for-the-same-mount-may-allow-privilege-escalation
- https://github.com/hashicorp/vault
- https://security.gentoo.org/glsa/202207-01
CVE-2021-41802 · published · modified · JSON