CVE-2020-7220

HIGH

HashiCorp Vault 0.11.0-1.3.1 - Improper Resource Shutdown or Release

Title source: llm
STIX 2.1

Description

HashiCorp Vault Enterprise 0.11.0 through 1.3.1 fails, in certain circumstances, to revoke dynamic secrets for a mount in a deleted namespace. Fixed in 1.3.2.

References (2)

Core 2

Scores

CVSS v3 7.5
EPSS 0.0029
EPSS Percentile 52.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-404
Status published
Products (2)
hashicorp/vault 0.11.0 - 1.3.2
hashicorp/vault 0.11.0 - 1.3.2Go
Published Jan 23, 2020
Tracked Since Feb 18, 2026