Security Advisory
CVE-2020-35177
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
HashiCorp Vault and Vault Enterprise 1.4.1 and newer allowed the enumeration of users via the LDAP auth method. Fixed in 1.5.6 and 1.6.1.