Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-bw4p-ht7x-ryfw
Vulnerability ID VCID-bw4p-ht7x-ryfw
Aliases CVE-2020-16251
GHSA-4mp7-2m29-gqxf
Summary HashiCorp Vault Authentication bypass HashiCorp Vault and Vault Enterprise versions 0.8.3 and newer, when configured with the GCP GCE auth method, may be vulnerable to authentication bypass. Fixed in 1.2.5, 1.3.8, 1.4.4, and 1.5.1.
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-287 Improper Authentication
System Score Found at
cvssv3.1 8.2 http://packetstormsecurity.com/files/159479/Hashicorp-Vault-GCP-IAM-Integration-Authentication-Bypass.html
generic_textual HIGH http://packetstormsecurity.com/files/159479/Hashicorp-Vault-GCP-IAM-Integration-Authentication-Bypass.html
cvssv3 8.2 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16251.json
epss 0.00866 https://api.first.org/data/v1/epss?cve=CVE-2020-16251
epss 0.00866 https://api.first.org/data/v1/epss?cve=CVE-2020-16251
cvssv3.1 8.2 https://github.com/hashicorp/vault
generic_textual HIGH https://github.com/hashicorp/vault
cvssv3.1 8.2 https://github.com/hashicorp/vault/blob/master/CHANGELOG.md#151
generic_textual HIGH https://github.com/hashicorp/vault/blob/master/CHANGELOG.md#151
cvssv3.1 8.2 https://nvd.nist.gov/vuln/detail/CVE-2020-16251
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2020-16251
cvssv3.1 8.2 https://www.hashicorp.com/blog/category/vault
generic_textual HIGH https://www.hashicorp.com/blog/category/vault
Reference id Reference type URL
http://packetstormsecurity.com/files/159479/Hashicorp-Vault-GCP-IAM-Integration-Authentication-Bypass.html
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16251.json
https://api.first.org/data/v1/epss?cve=CVE-2020-16251
https://github.com/hashicorp/vault
https://github.com/hashicorp/vault/blob/master/CHANGELOG.md#151
https://nvd.nist.gov/vuln/detail/CVE-2020-16251
https://www.hashicorp.com/blog/category/vault
2167340 https://bugzilla.redhat.com/show_bug.cgi?id=2167340
RHSA-2023:2138 https://access.redhat.com/errata/RHSA-2023:2138
RHSA-2023:3742 https://access.redhat.com/errata/RHSA-2023:3742
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N Found at http://packetstormsecurity.com/files/159479/Hashicorp-Vault-GCP-IAM-Integration-Authentication-Bypass.html
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16251.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N Found at https://github.com/hashicorp/vault
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N Found at https://github.com/hashicorp/vault/blob/master/CHANGELOG.md#151
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2020-16251
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N Found at https://www.hashicorp.com/blog/category/vault
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.75479
EPSS Score 0.00866
Published At June 4, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-04T16:46:00.662133+00:00 GithubOSV Importer Import https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/01/GHSA-4mp7-2m29-gqxf/GHSA-4mp7-2m29-gqxf.json 38.6.0