Affected by GO-2022-0618
and 11 other vulnerabilities
GO-2022-0618 : Hashicorp Vault Privilege Escalation Vulnerability in github.com/hashicorp/vault
GO-2022-0632 : Improper Removal of Sensitive Information Before Storage or Transfer in HashiCorp Vault in github.com/hashicorp/vault
GO-2023-1708 : HashiCorp Vault's PKI mount vulnerable to denial of service in github.com/hashicorp/vault
GO-2023-1849 : Hashicorp Vault vulnerable to Cross-site Scripting in github.com/hashicorp/vault
GO-2023-1897 : HashiCorp Vault's revocation list not respected in github.com/hashicorp/vault
GO-2023-1900 : Hashicorp Vault Fails to Verify if Approle SecretID Belongs to Role During a Destroy Operation in github.com/hashicorp/vault
GO-2023-1986 : HashiCorp Vault and Vault Enterprise vulnerable to user enumeration in github.com/hashicorp/vault
GO-2023-2088 : Hashicorp Vault Incorrect Permission Assignment for Critical Resource vulnerability in github.com/hashicorp/vault
GO-2023-2329 : HashiCorp Vault Missing Release of Memory after Effective Lifetime vulnerability in github.com/hashicorp/vault
GO-2024-2617 : Authentication bypass in github.com/hashicorp/vault
GO-2024-2690 : HashiCorpVault does not correctly validate OCSP responses in github.com/hashicorp/vault
GO-2024-3191 : Vault Community Edition privilege escalation vulnerability in github.com/hashicorp/vault
Discover Packages
github.com/hashicorp/vault
command
token
package
Version:
v0.4.0
Opens a new window with list of versions in this module.
Published: Dec 10, 2015
License: MPL-2.0
Opens a new window with license information.
Imports: 10
Opens a new window with list of imports.
Imported by: 149
Opens a new window with list of known importers.
Documentation
Documentation
¶
ExecScript returns a command to execute a script
HelperPath takes the configured path to a helper and expands it to
a full absolute path that can be executed. If the path is relative then
a prefix of "vault token-" will be prepended to the path.
Test is a public function that can be used in other tests to
test that a helper is functioning properly.
TestHelperProcessCLI can be called to implement TestHelperProcess
for TestProcess that just executes a CLI command.
TestProcess is used to re-execute this test in order to use it as the
helper process. For this to work, the TestHelperProcess function must
exist.
TestProcessPath returns the path to the test process.
Helper is the struct that has all the logic for storing and retrieving
tokens from the token helper. The API for the helpers is simple: the
Path is executed within a shell with environment Env. The last argument
appended will be the operation, which is:
"get" - Read the value of the token and write it to stdout.
"store" - Store the value of the token which is on stdin. Output
nothing.
"erase" - Erase the contents stored. Output nothing.
Any errors can be written on stdout. If the helper exits with a non-zero
exit code then the stderr will be made part of the error value.
Erase deletes the contents from the helper.
Get gets the token value from the helper.
Store stores the token value into the helper.
Source Files
¶
Click to show internal directories.
Click to hide internal directories.