Alpine/vault: high 7.4
HashiCorp Vault and Vault Enterprise allowed the renewal of nearly-expired token leases and dynamic secret leases (specifically, those within 1 second of their maximum TTL), which caused them to be in
Action: Upgrade vault to 1.7.2-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.10.0 | 1.7.2-r0 | - |
Fixed versions
| 1.7.2-r0 |
Sources
published · modified · JSON