CVE-2024-9180 - Apache Vault Privilege Escalation Vulnerability

CVE ID : CVE-2024-9180
Published : Oct. 10, 2024, 9:15 p.m. | 24 minutes ago
Description : A privileged Vault operator with write permissions to the root namespace’s identity endpoint could escalate their privileges to Vault’s root policy. Fixed in Vault Community Edition 1.18.0 and Vault Enterprise 1.18.0, 1.17.7, 1.16.11, and 1.15.16.
Severity: 7.2 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...