Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 09:44:56 +0000 CVE-2023-3462 — Vault's LDAP Auth Method Allows for User Enumeration https://cve.radiocsirt.org/vuln/cve-2023-3462 <p><strong>Affected:</strong> HashiCorp Vault, HashiCorp Vault Enterprise</p> <p>HashiCorp&#39;s Vault and Vault Enterprise are vulnerable to user enumeration when using the LDAP auth method. An attacker may submit requests of existent and non-existent LDAP users and observe the response from Vault to check if the account is valid on the LDAP server. This vulnerability is fixed in Vault 1.14.1 and 1.13.5.</p> <p><strong>Affected:</strong> HashiCorp Vault, HashiCorp Vault Enterprise</p> <p>HashiCorp&#39;s Vault and Vault Enterprise are vulnerable to user enumeration when using the LDAP auth method. An attacker may submit requests of existent and non-existent LDAP users and observe the response from Vault to check if the account is valid on the LDAP server. This vulnerability is fixed in Vault 1.14.1 and 1.13.5.</p> https://cve.radiocsirt.org/vuln/cve-2023-3462