CVE-2022-25244

—

CVSS 3.1

6.5 medium

EPSS

<1%p59

Published

Mar 10, 2022 (Mar 10, 2022)

Modified

Jun 17, 2026

Description

Vault Enterprise clusters using the tokenization transform feature can expose the tokenization key through the tokenization key configuration endpoint to authorized operators with `read` permissions on this endpoint. Fixed in Vault Enterprise 1.9.4, 1.8.9 and 1.7.10.

Vendors: hashicorp
Products: vault
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.