Go/github.com/hashicorp/vault CVE-2024-7594: high 8.8, EPSS 0.27%
Vault SSH Secrets Engine Configuration Did Not Restrict Valid Principals By Default in github.com/hashicorp/vault
Action: Upgrade github.com/hashicorp/vault to 1.17.6 or later.
go get github.com/hashicorp/vault@v1.17.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.7.7 | 1.17.6 | - |
Fixed versions
| 1.17.6 |
Sources
- osv: GO-2024-3162
- nvd: CVE-2024-7594
- https://github.com/advisories/GHSA-jg74-mwgw-v6x3
- https://discuss.hashicorp.com/t/hcsec-2024-20-vault-ssh-secrets-engine-configuration-did-not-restrict-valid-principals-by-default/70251
CVE-2024-7594 · published · modified · JSON