"Vault and Vault Enterprise 1.8.0... CVE-2022-25243
3.5
AV
AC
AU
C
I
A
发布：
2022-03-10
修订：
2022-11-09
"Vault and Vault Enterprise 1.8.0 through 1.8.8, and 1.9.3 allowed the PKI secrets engine under certain configurations to issue wildcard certificates to authorized users for a specified domain, even if the PKI role policy attribute allow_subdomains is set to false. Fixed in Vault Enterprise 1.8.9 and 1.9.4.
漏洞利用/PoC
暂无可用Exp或PoC
受影响的平台与产品
当前有4条受影响产品信息
