UpHeron
All vulnerabilities

Servers and applications

CVE-2022-25244

Vault Enterprise clusters using the tokenization transform feature can expose the tokenization key through the tokenization key configuration endpoint to authorized operators with `read` permissions on this endpoint. Fixed in Vault Enterprise 1.9.4, 1.8.9 and 1.7.10.

Severity
Medium 6.5
Published
10 Mar 2022
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
1.7.10, 1.8.9, 1.9.4
Sources
NVD

Affected software

SoftwareAffected versions
HashiCorp VaultServers and applications · cpe:a:hashicorp:vault
  • From 1.7.0 before 1.7.10
  • From 1.8.0 before 1.8.9
  • From 1.9.0 before 1.9.4

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-25244
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-25244