Approved changes feed: RSS · Atom

cpe:2.3:a:hashicorp:vault:1.8.4:*:*:*:enterprise:*:*:*

part: a version: 1.8.4 update: *

VendorHashicorp (dc524c16-6a01-528e-a41c-9d3e02e5e4a3)
ProductVault (4dadab3d-054a-5498-9618-09dfc641ef81)
Edition*
Language*
Software editionenterprise
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/hashicorp/vault/ purl2cpe 2026-06-01 10:14:57.367255

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-43998 vulnerable 2026-06-03 14:45:35.332205 Details available
HashiCorp Vault and Vault Enterprise 0.11.0 up to 1.7.5 and 1.8.4 templated ACL policies would always match the first-created entity alias if multiple entity aliases exist for a specified entity and mount combination, potentially resulting in incorrect policy enforcement. Fixed in Vault and Vault Enterprise 1.7.6, 1.8.5, and 1.9.0.
Published: 2021-11-30T14:59:08.000Z
Updated: 2024-08-04T04:10:17.167Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.