UpHeron
All vulnerabilities

Servers and applications

CVE-2020-10660

HashiCorp Vault and Vault Enterprise versions 0.9.0 through 1.3.3 may, under certain circumstances, have an Entity's Group membership inadvertently include Groups the Entity no longer has permissions to. Fixed in 1.3.4.

Severity
Medium 5.3
Published
23 Mar 2020
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
HashiCorp VaultServers and applications · cpe:a:hashicorp:vault
  • From 0.9.0 up to 1.3.3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-10660
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-10660