Vulnerabilitycritical
HashiCorp Vault vulnerability could lead to RCE, patch today! (CVE-2023-0620)
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-0620 | HashiCorp Vault and Vault Enterprise versions 0.8.0 through 1.13.1 are vulnerable to an SQL injection attack when configuring the Microsoft SQL (MSSQL)… | 6.7 | <1% |
From the original article
2 min read at helpnetsecurity.com
Oxeye discovered a new vulnerability (CVE-2023-0620) in the HashiCorp Vault Project, an identity-based secrets and encryption management system that controls access to API encryption keys, passwords , and certificates. The vulnerability was an SQL injection vulnerability that potentially could lead to a Remote Code Execution (RCE).
By @helpnetsecurity · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.