CVE-2020-35177 : HashiCorp Vault and Vault Enterprise 1.4.1 and newer allowed the enumeration of

HashiCorp Vault and Vault Enterprise 1.4.1 and newer allowed the enumeration of users via the LDAP auth method. Fixed in 1.5.6 and 1.6.1.

Published 2020-12-17 05:15:11

Updated 2021-07-21 11:39:24

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2020-35177

Hashicorp » Vault »
Versions from including (>=) 1.5.0 and before (<) 1.5.6
cpe:2.3:a:hashicorp:vault:*:*:*:*:-:*:*:*
Matching versions
Hashicorp » Vault » Enterprise Edition
Versions from including (>=) 1.6.0 and before (<) 1.6.1
cpe:2.3:a:hashicorp:vault:*:*:*:*:enterprise:*:*:*
Matching versions
Hashicorp » Vault »
Versions from including (>=) 1.6.0 and before (<) 1.6.1
cpe:2.3:a:hashicorp:vault:*:*:*:*:-:*:*:*
Matching versions
Hashicorp » Vault » Enterprise Edition
Versions from including (>=) 1.5.0 and before (<) 1.5.6
cpe:2.3:a:hashicorp:vault:*:*:*:*:enterprise:*:*:*
Matching versions

EPSS FAQ

0.09%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 38 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
5.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N	3.9	1.4	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: None Availability: None

CWE-209 Generation of Error Message Containing Sensitive Information

The product generates an error message that includes sensitive information about its environment, users, or associated data.

Assigned by: nvd@nist.gov (Primary)

https://github.com/hashicorp/vault/blob/master/CHANGELOG.md#161

vault/CHANGELOG.md at master · hashicorp/vault · GitHub
Release Notes

CVEs referencing this url
https://discuss.hashicorp.com/t/hcsec-2020-25-vault-s-ldap-auth-method-allows-user-enumeration/18984

HCSEC-2020-25 - Vault’s LDAP Auth Method Allows User Enumeration - Security - HashiCorp Discuss
Vendor Advisory

Jump to