HashiCorp Vault

• CVE-2022-3920 ↗MEDIUM 5.32022

  HashiCorp Consul and Consul Enterprise 1.13.0 up to 1.13.3 do not filter cluster filtering's imported nodes and services for HTTP or RPC endpoints used by the UI. Fixed in 1.14.0.

• CVE-2022-3867 ↗LOW 2.72022

  HashiCorp Nomad and Nomad Enterprise 1.4.0 up to 1.4.1 event stream subscribers using a token with TTL receive updates until token garbage is collected. Fixed in 1.4.2.

• CVE-2022-3866 ↗MEDIUM 5.02022

  HashiCorp Nomad and Nomad Enterprise 1.4.0 up to 1.4.1 workload identity token can list non-sensitive metadata for paths under nomad/ that belong to other jobs in the same namespace. Fixed in 1.4.2.

• …and 97 more · see all on the vendor page →

No datasheets, whitepapers, case studies, videos, or demos linked yet.

• Entro Non-Human Identities · Entro Security
• Eos Identity Security Platform · Eos
• GitGuardian NHI Governance · GitGuardian
• GlobalSign IoT Identity Platform · GlobalSign
• Hush Platform · Hush Security
• Hush Security · Hush Security
• IBM Cloud Secrets Manager · IBM
• Identity Threat Detection & Response · Token Security