Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-p861-tjpz-hkhs
Summary
Enumeration of users in HashiCorp Vault
HashiCorp Vault and Vault Enterprise allowed the enumeration of users via the LDAP auth method. Fixed in 1.5.6 and 1.6.1.
Aliases
0
alias CVE-2020-35177
1
alias GHSA-rpgp-9hmg-j25x
Fixed_packages
0
url pkg:alpm/archlinux/vault@1.5.7-1
purl pkg:alpm/archlinux/vault@1.5.7-1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/vault@1.5.7-1
1
url pkg:apk/alpine/vault@1.5.6-r0?arch=s390x&distroversion=v3.14&reponame=community
purl pkg:apk/alpine/vault@1.5.6-r0?arch=s390x&distroversion=v3.14&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vault@1.5.6-r0%3Farch=s390x&distroversion=v3.14&reponame=community
2
url pkg:apk/alpine/vault@1.5.6-r0?arch=ppc64le&distroversion=v3.16&reponame=community
purl pkg:apk/alpine/vault@1.5.6-r0?arch=ppc64le&distroversion=v3.16&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vault@1.5.6-r0%3Farch=ppc64le&distroversion=v3.16&reponame=community
3
url pkg:apk/alpine/vault@1.5.6-r0?arch=armv7&distroversion=v3.15&reponame=community
purl pkg:apk/alpine/vault@1.5.6-r0?arch=armv7&distroversion=v3.15&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vault@1.5.6-r0%3Farch=armv7&distroversion=v3.15&reponame=community
4
url pkg:apk/alpine/vault@1.5.6-r0?arch=ppc64le&distroversion=v3.13&reponame=community
purl pkg:apk/alpine/vault@1.5.6-r0?arch=ppc64le&distroversion=v3.13&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vault@1.5.6-r0%3Farch=ppc64le&distroversion=v3.13&reponame=community
5
url pkg:apk/alpine/vault@1.5.6-r0?arch=x86_64&distroversion=v3.13&reponame=community
purl pkg:apk/alpine/vault@1.5.6-r0?arch=x86_64&distroversion=v3.13&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vault@1.5.6-r0%3Farch=x86_64&distroversion=v3.13&reponame=community
6
url pkg:apk/alpine/vault@1.5.6-r0?arch=x86&distroversion=v3.17&reponame=community
purl pkg:apk/alpine/vault@1.5.6-r0?arch=x86&distroversion=v3.17&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vault@1.5.6-r0%3Farch=x86&distroversion=v3.17&reponame=community
7
url pkg:apk/alpine/vault@1.5.6-r0?arch=aarch64&distroversion=v3.18&reponame=community
purl pkg:apk/alpine/vault@1.5.6-r0?arch=aarch64&distroversion=v3.18&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vault@1.5.6-r0%3Farch=aarch64&distroversion=v3.18&reponame=community
8
url pkg:apk/alpine/vault@1.5.6-r0?arch=aarch64&distroversion=v3.16&reponame=community
purl pkg:apk/alpine/vault@1.5.6-r0?arch=aarch64&distroversion=v3.16&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vault@1.5.6-r0%3Farch=aarch64&distroversion=v3.16&reponame=community
9
url pkg:apk/alpine/vault@1.5.6-r0?arch=armhf&distroversion=v3.16&reponame=community
purl pkg:apk/alpine/vault@1.5.6-r0?arch=armhf&distroversion=v3.16&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vault@1.5.6-r0%3Farch=armhf&distroversion=v3.16&reponame=community
10
url pkg:apk/alpine/vault@1.5.6-r0?arch=armv7&distroversion=v3.16&reponame=community
purl pkg:apk/alpine/vault@1.5.6-r0?arch=armv7&distroversion=v3.16&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vault@1.5.6-r0%3Farch=armv7&distroversion=v3.16&reponame=community
11
url pkg:apk/alpine/vault@1.5.6-r0?arch=s390x&distroversion=v3.16&reponame=community
purl pkg:apk/alpine/vault@1.5.6-r0?arch=s390x&distroversion=v3.16&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vault@1.5.6-r0%3Farch=s390x&distroversion=v3.16&reponame=community
12
url pkg:apk/alpine/vault@1.5.6-r0?arch=x86&distroversion=v3.16&reponame=community
purl pkg:apk/alpine/vault@1.5.6-r0?arch=x86&distroversion=v3.16&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vault@1.5.6-r0%3Farch=x86&distroversion=v3.16&reponame=community
13
url pkg:apk/alpine/vault@1.5.6-r0?arch=x86_64&distroversion=v3.16&reponame=community
purl pkg:apk/alpine/vault@1.5.6-r0?arch=x86_64&distroversion=v3.16&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vault@1.5.6-r0%3Farch=x86_64&distroversion=v3.16&reponame=community
14
url pkg:apk/alpine/vault@1.5.6-r0?arch=aarch64&distroversion=v3.15&reponame=community
purl pkg:apk/alpine/vault@1.5.6-r0?arch=aarch64&distroversion=v3.15&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vault@1.5.6-r0%3Farch=aarch64&distroversion=v3.15&reponame=community
15
url pkg:apk/alpine/vault@1.5.6-r0?arch=armhf&distroversion=v3.15&reponame=community
purl pkg:apk/alpine/vault@1.5.6-r0?arch=armhf&distroversion=v3.15&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vault@1.5.6-r0%3Farch=armhf&distroversion=v3.15&reponame=community
16
url pkg:apk/alpine/vault@1.5.6-r0?arch=ppc64le&distroversion=v3.15&reponame=community
purl pkg:apk/alpine/vault@1.5.6-r0?arch=ppc64le&distroversion=v3.15&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vault@1.5.6-r0%3Farch=ppc64le&distroversion=v3.15&reponame=community
17
url pkg:apk/alpine/vault@1.5.6-r0?arch=s390x&distroversion=v3.15&reponame=community
purl pkg:apk/alpine/vault@1.5.6-r0?arch=s390x&distroversion=v3.15&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vault@1.5.6-r0%3Farch=s390x&distroversion=v3.15&reponame=community
18
url pkg:apk/alpine/vault@1.5.6-r0?arch=x86&distroversion=v3.15&reponame=community
purl pkg:apk/alpine/vault@1.5.6-r0?arch=x86&distroversion=v3.15&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vault@1.5.6-r0%3Farch=x86&distroversion=v3.15&reponame=community
19
url pkg:apk/alpine/vault@1.5.6-r0?arch=armhf&distroversion=v3.13&reponame=community
purl pkg:apk/alpine/vault@1.5.6-r0?arch=armhf&distroversion=v3.13&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vault@1.5.6-r0%3Farch=armhf&distroversion=v3.13&reponame=community
20
url pkg:apk/alpine/vault@1.5.6-r0?arch=armv7&distroversion=v3.13&reponame=community
purl pkg:apk/alpine/vault@1.5.6-r0?arch=armv7&distroversion=v3.13&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vault@1.5.6-r0%3Farch=armv7&distroversion=v3.13&reponame=community
21
url pkg:apk/alpine/vault@1.5.6-r0?arch=mips64&distroversion=v3.13&reponame=community
purl pkg:apk/alpine/vault@1.5.6-r0?arch=mips64&distroversion=v3.13&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vault@1.5.6-r0%3Farch=mips64&distroversion=v3.13&reponame=community
22
url pkg:apk/alpine/vault@1.5.6-r0?arch=s390x&distroversion=v3.13&reponame=community
purl pkg:apk/alpine/vault@1.5.6-r0?arch=s390x&distroversion=v3.13&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vault@1.5.6-r0%3Farch=s390x&distroversion=v3.13&reponame=community
23
url pkg:apk/alpine/vault@1.5.6-r0?arch=x86&distroversion=v3.13&reponame=community
purl pkg:apk/alpine/vault@1.5.6-r0?arch=x86&distroversion=v3.13&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vault@1.5.6-r0%3Farch=x86&distroversion=v3.13&reponame=community
24
url pkg:apk/alpine/vault@1.5.6-r0?arch=aarch64&distroversion=v3.14&reponame=community
purl pkg:apk/alpine/vault@1.5.6-r0?arch=aarch64&distroversion=v3.14&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vault@1.5.6-r0%3Farch=aarch64&distroversion=v3.14&reponame=community
25
url pkg:apk/alpine/vault@1.5.6-r0?arch=armhf&distroversion=v3.14&reponame=community
purl pkg:apk/alpine/vault@1.5.6-r0?arch=armhf&distroversion=v3.14&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vault@1.5.6-r0%3Farch=armhf&distroversion=v3.14&reponame=community
26
url pkg:apk/alpine/vault@1.5.6-r0?arch=ppc64le&distroversion=v3.14&reponame=community
purl pkg:apk/alpine/vault@1.5.6-r0?arch=ppc64le&distroversion=v3.14&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vault@1.5.6-r0%3Farch=ppc64le&distroversion=v3.14&reponame=community
27
url pkg:apk/alpine/vault@1.5.6-r0?arch=x86&distroversion=v3.14&reponame=community
purl pkg:apk/alpine/vault@1.5.6-r0?arch=x86&distroversion=v3.14&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vault@1.5.6-r0%3Farch=x86&distroversion=v3.14&reponame=community
28
url pkg:apk/alpine/vault@1.5.6-r0?arch=x86_64&distroversion=v3.14&reponame=community
purl pkg:apk/alpine/vault@1.5.6-r0?arch=x86_64&distroversion=v3.14&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vault@1.5.6-r0%3Farch=x86_64&distroversion=v3.14&reponame=community
29
url pkg:apk/alpine/vault@1.5.6-r0?arch=armhf&distroversion=v3.18&reponame=community
purl pkg:apk/alpine/vault@1.5.6-r0?arch=armhf&distroversion=v3.18&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vault@1.5.6-r0%3Farch=armhf&distroversion=v3.18&reponame=community
30
url pkg:apk/alpine/vault@1.5.6-r0?arch=armv7&distroversion=v3.18&reponame=community
purl pkg:apk/alpine/vault@1.5.6-r0?arch=armv7&distroversion=v3.18&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vault@1.5.6-r0%3Farch=armv7&distroversion=v3.18&reponame=community
31
url pkg:apk/alpine/vault@1.5.6-r0?arch=ppc64le&distroversion=v3.18&reponame=community
purl pkg:apk/alpine/vault@1.5.6-r0?arch=ppc64le&distroversion=v3.18&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vault@1.5.6-r0%3Farch=ppc64le&distroversion=v3.18&reponame=community
32
url pkg:apk/alpine/vault@1.5.6-r0?arch=x86&distroversion=v3.18&reponame=community
purl pkg:apk/alpine/vault@1.5.6-r0?arch=x86&distroversion=v3.18&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vault@1.5.6-r0%3Farch=x86&distroversion=v3.18&reponame=community
33
url pkg:apk/alpine/vault@1.5.6-r0?arch=x86_64&distroversion=v3.18&reponame=community
purl pkg:apk/alpine/vault@1.5.6-r0?arch=x86_64&distroversion=v3.18&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vault@1.5.6-r0%3Farch=x86_64&distroversion=v3.18&reponame=community
34
url pkg:apk/alpine/vault@1.5.6-r0?arch=x86_64&distroversion=v3.15&reponame=community
purl pkg:apk/alpine/vault@1.5.6-r0?arch=x86_64&distroversion=v3.15&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vault@1.5.6-r0%3Farch=x86_64&distroversion=v3.15&reponame=community
35
url pkg:apk/alpine/vault@1.5.6-r0?arch=aarch64&distroversion=v3.13&reponame=community
purl pkg:apk/alpine/vault@1.5.6-r0?arch=aarch64&distroversion=v3.13&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vault@1.5.6-r0%3Farch=aarch64&distroversion=v3.13&reponame=community
36
url pkg:apk/alpine/vault@1.5.6-r0?arch=armv7&distroversion=v3.14&reponame=community
purl pkg:apk/alpine/vault@1.5.6-r0?arch=armv7&distroversion=v3.14&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vault@1.5.6-r0%3Farch=armv7&distroversion=v3.14&reponame=community
37
url pkg:apk/alpine/vault@1.5.6-r0?arch=s390x&distroversion=v3.18&reponame=community
purl pkg:apk/alpine/vault@1.5.6-r0?arch=s390x&distroversion=v3.18&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vault@1.5.6-r0%3Farch=s390x&distroversion=v3.18&reponame=community
38
url pkg:apk/alpine/vault@1.5.6-r0?arch=aarch64&distroversion=v3.17&reponame=community
purl pkg:apk/alpine/vault@1.5.6-r0?arch=aarch64&distroversion=v3.17&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vault@1.5.6-r0%3Farch=aarch64&distroversion=v3.17&reponame=community
39
url pkg:apk/alpine/vault@1.5.6-r0?arch=armhf&distroversion=v3.17&reponame=community
purl pkg:apk/alpine/vault@1.5.6-r0?arch=armhf&distroversion=v3.17&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vault@1.5.6-r0%3Farch=armhf&distroversion=v3.17&reponame=community
40
url pkg:apk/alpine/vault@1.5.6-r0?arch=armv7&distroversion=v3.17&reponame=community
purl pkg:apk/alpine/vault@1.5.6-r0?arch=armv7&distroversion=v3.17&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vault@1.5.6-r0%3Farch=armv7&distroversion=v3.17&reponame=community
41
url pkg:apk/alpine/vault@1.5.6-r0?arch=ppc64le&distroversion=v3.17&reponame=community
purl pkg:apk/alpine/vault@1.5.6-r0?arch=ppc64le&distroversion=v3.17&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vault@1.5.6-r0%3Farch=ppc64le&distroversion=v3.17&reponame=community
42
url pkg:apk/alpine/vault@1.5.6-r0?arch=s390x&distroversion=v3.17&reponame=community
purl pkg:apk/alpine/vault@1.5.6-r0?arch=s390x&distroversion=v3.17&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vault@1.5.6-r0%3Farch=s390x&distroversion=v3.17&reponame=community
43
url pkg:apk/alpine/vault@1.5.6-r0?arch=x86_64&distroversion=v3.17&reponame=community
purl pkg:apk/alpine/vault@1.5.6-r0?arch=x86_64&distroversion=v3.17&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/vault@1.5.6-r0%3Farch=x86_64&distroversion=v3.17&reponame=community
44
url pkg:golang/github.com/hashicorp/vault@1.5.6
purl pkg:golang/github.com/hashicorp/vault@1.5.6
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:golang/github.com/hashicorp/vault@1.5.6
45
url pkg:golang/github.com/hashicorp/vault@1.6.1
purl pkg:golang/github.com/hashicorp/vault@1.6.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:golang/github.com/hashicorp/vault@1.6.1
Affected_packages
0
url pkg:alpm/archlinux/vault@1.5.5-1
purl pkg:alpm/archlinux/vault@1.5.5-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ep86-bgh1-fbb2
1
vulnerability VCID-mcmw-uyjd-2kf3
2
vulnerability VCID-p861-tjpz-hkhs
resource_url http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/vault@1.5.5-1
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-35177.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-35177.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-35177
reference_id
reference_type
scores
0
value 0.00395
scoring_system epss
scoring_elements 0.60383
published_at 2026-04-24T12:55:00Z
1
value 0.00395
scoring_system epss
scoring_elements 0.60337
published_at 2026-04-04T12:55:00Z
2
value 0.00395
scoring_system epss
scoring_elements 0.60305
published_at 2026-04-07T12:55:00Z
3
value 0.00395
scoring_system epss
scoring_elements 0.60355
published_at 2026-04-08T12:55:00Z
4
value 0.00395
scoring_system epss
scoring_elements 0.6037
published_at 2026-04-09T12:55:00Z
5
value 0.00395
scoring_system epss
scoring_elements 0.60392
published_at 2026-04-11T12:55:00Z
6
value 0.00395
scoring_system epss
scoring_elements 0.60378
published_at 2026-04-12T12:55:00Z
7
value 0.00395
scoring_system epss
scoring_elements 0.60359
published_at 2026-04-13T12:55:00Z
8
value 0.00395
scoring_system epss
scoring_elements 0.604
published_at 2026-04-21T12:55:00Z
9
value 0.00395
scoring_system epss
scoring_elements 0.60408
published_at 2026-04-18T12:55:00Z
10
value 0.00395
scoring_system epss
scoring_elements 0.60235
published_at 2026-04-01T12:55:00Z
11
value 0.00395
scoring_system epss
scoring_elements 0.60312
published_at 2026-04-02T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-35177
2
reference_url https://discuss.hashicorp.com/t/hcsec-2020-25-vault-s-ldap-auth-method-allows-user-enumeration/18984
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:R
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://discuss.hashicorp.com/t/hcsec-2020-25-vault-s-ldap-auth-method-allows-user-enumeration/18984
3
reference_url https://github.com/hashicorp/vault/blob/master/CHANGELOG.md#161
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:R
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/hashicorp/vault/blob/master/CHANGELOG.md#161
4
reference_url https://github.com/hashicorp/vault/pull/10537
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:R
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/hashicorp/vault/pull/10537
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-35177
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:R
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-35177
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1953042
reference_id 1953042
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1953042
7
reference_url https://security.archlinux.org/AVG-1368
reference_id AVG-1368
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-1368
Weaknesses
0
cwe_id 200
name Exposure of Sensitive Information to an Unauthorized Actor
description The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Exploits
Severity_range_score4.0 - 6.9
Exploitability0.5
Weighted_severity6.2
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-p861-tjpz-hkhs