Security Advisory

CVE-2020-25594

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-02-01 15:41:36

Last updated 2024-08-04 15:33:05

Assigner mitre

CVSS score not scored

State PUBLISHED

HashiCorp Vault and Vault Enterprise allowed for enumeration of Secrets Engine mount paths via unauthenticated HTTP requests. Fixed in 1.6.2 & 1.5.7.