26Eyl
CVE-2024-7594 | HashiCorp Vault/Vault Enterprise up to 1.15.14/1.16.9/1.17.5 Engine Configuration valid_principals/default_user permission assignment
A vulnerability, which was classified as critical, was found in HashiCorp Vault and Vault Enterprise up to 1.15.14/1.16.9/1.17.5. This affects an unknown part of the component Engine Configuration Handler. The manipulation of the argument valid_principals/default_user leads to incorrect permission assignment. This vulnerability is uniquely identified as CVE-2024-7594. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.