Approved changes feed: RSS · Atom

cpe:2.3:a:vmware:spring_cloud_vault:4.0.0:*:*:*:*:*:*:*

part: a version: 4.0.0 update: *

VendorVmware (7bb62c7c-2241-5a0b-8dbc-5f13251fb24e)
ProductSpring Cloud Vault (abc2681c-d956-53ef-b273-8c01fa65e1de)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-20859 vulnerable 2026-06-08 05:54:17.954365 Details available
In Spring Vault, versions 3.0.x prior to 3.0.2 and versions 2.3.x prior to 2.3.3 and older versions, an application is vulnerable to insertion of sensitive information into a log file when it attempts to revoke a Vault batch token.
Published: 2023-03-23T00:00:00.000Z
Updated: 2025-02-25T15:40:28.087Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.