hashicorp
208 tracked vulnerabilities.
CVE-2021-27400
HIGH
HashiCorp Vault <1.6.4, <1.7.1 - Info Disclosure
Apr 22, 2021
CVSS 7.5
EPSS 0.01
CVE-2021-28156
HIGH
HashiCorp Consul Enterprise <1.9.4 - Auth Bypass
Apr 20, 2021
CVSS 7.5
EPSS 0.02
CVE-2021-3153
MEDIUM
HashiCorp Terraform Enterprise < 202102-2 - Improper Authentication via Organization-Level MFA Bypass
Mar 26, 2021
CVSS 6.5
EPSS 0.01
CVE-2021-3283
HIGH
HashiCorp Nomad <0.12.9 - Privilege Escalation
Feb 01, 2021
CVSS 7.5
EPSS 0.01
CVE-2021-3282
HIGH
HashiCorp Vault Enterprise <1.6.2 - Privilege Escalation
Feb 01, 2021
CVSS 7.5
EPSS 0.01
CVE-2021-3024
MEDIUM
HashiCorp Vault <1.6.2-1.5.7 - Info Disclosure
Feb 01, 2021
CVSS 5.3
EPSS 0.01
CVE-2021-3121
HIGH
GoGo Protobuf < 1.3.2 - Denial of Service via Improper Array Index Validation
Jan 11, 2021
CVSS 8.6
EPSS 0.03
CVE-2020-25864
MEDIUM
NUCLEI
HashiCorp Consul < 1.7.14, 1.8.0-1.8.9, 1.9.0-1.9.4 - Stored Cross-Site Scripting in KV Raw Mode
Apr 20, 2021
CVSS 6.1
EPSS 0.06
CVE-2020-25594
MEDIUM
HashiCorp Vault <1.6.2-1.5.7 - Info Disclosure
Feb 01, 2021
CVSS 5.3
EPSS 0.01
CVE-2020-8567
MEDIUM
Google Secret Manager Provider For Secret Store Csi Driver < 0.2.0 - Path Traversal
Jan 21, 2021
CVSS 4.9
EPSS 0.01
CVE-2020-35453
MEDIUM
HashiCorp Vault Enterprise - Privilege Escalation
Dec 17, 2020
CVSS 5.3
EPSS 0.01
CVE-2020-35177
MEDIUM
HashiCorp Vault <1.5.6, <1.6.1 - Info Disclosure
Dec 17, 2020
CVSS 5.3
EPSS 0.01
CVE-2020-35192
CRITICAL
Vault Docker <0.11.6 - Privilege Escalation
Dec 17, 2020
CVSS 9.8
EPSS 0.03
CVE-2020-29564
CRITICAL
Consul Docker <1.4.2 - Privilege Escalation
Dec 08, 2020
CVSS 9.8
EPSS 0.06
CVE-2020-29529
HIGH
HashiCorp go-slug <0.5.0 - Path Traversal
Dec 03, 2020
CVSS 7.5
EPSS 0.03
CVE-2020-28348
MEDIUM
HashiCorp Nomad 0.9.0-0.12.7 - Path Traversal via Docker File Sandbox
Nov 24, 2020
CVSS 6.5
EPSS 0.02
CVE-2020-28053
MEDIUM
HashiCorp Consul 1.2.0-1.8.5 - Incorrect Authorization for Connect CA Private Key
Nov 23, 2020
CVSS 6.5
EPSS 0.01
CVE-2020-25201
HIGH
HashiCorp Consul 1.7.0-1.8.4 - Denial of Service via Namespace Replication Raft Writes
Nov 04, 2020
CVSS 7.5
EPSS 0.03
CVE-2020-27195
CRITICAL
HashiCorp Nomad <0.12.5 - Code Injection
Oct 22, 2020
CVSS 9.1
EPSS 0.01
CVE-2020-25816
MEDIUM
HashiCorp Vault <1.4.7, <1.5.4 - Info Disclosure
Sep 30, 2020
CVSS 6.8
EPSS 0.01
CVE-2020-16251
HIGH
HashiCorp Vault 0.8.3-1.2.4 - Authentication Bypass via GCP GCE Auth Method
Aug 26, 2020
CVSS 8.2
EPSS 0.03
CVE-2020-16250
HIGH
HashiCorp Vault 0.7.1-1.2.4 - Authentication Bypass via AWS IAM Auth Method
Aug 26, 2020
CVSS 8.2
EPSS 0.01
CVE-2020-24359
HIGH
HashiCorp vault-ssh-helper <0.2.0 - Info Disclosure
Aug 20, 2020
CVSS 7.5
EPSS 0.01
CVE-2020-15511
MEDIUM
HashiCorp Terraform Enterprise <202006-1 - Auth Bypass
Jul 30, 2020
CVSS 5.3
EPSS 0.01
CVE-2020-13250
HIGH
HashiCorp Consul <1.6.6, <1.7.4 - DoS
Jun 11, 2020
CVSS 7.5
EPSS 0.03
Products
vault 72
nomad 38
consul 36
go-getter 10
vagrant_vmware_fusion 7
boundary 6
Nomad 5
Nomad Enterprise 5
Vault 5
Vault Enterprise 5
terraform 5
terraform_enterprise 5
Tooling 4
vagrant 4
Shared library 3
Consul 2
Consul Enterprise 2
go-slug 2
sentinel 2
terraform_provider 2
Boundary 1
Boundary Enterprise 1
Terraform Enterprise 1
consul-template 1
consul_docker_image 1
consul_template 1
go-retryablehttp 1
hermes 1
nomad-driver-exec2 1
packer 1
Quick Filters