pkiext_binary

Aug 29, 2024 GO-2024-3113

  GO-2024-3113: Vault Leaks Client Token and Token Accessor in Audit Devices in github.com/hashicorp/vault

Aug 6, 2024 GO-2024-3113

  GO-2024-3113: Vault Leaks Client Token and Token Accessor in Audit Devices in github.com/hashicorp/vault

Jun 25, 2024 GO-2024-2982

  GO-2024-2982: Hashicorp Vault vulnerable to Improper Check or Handling of Exceptional Conditions in github.com/hashicorp/vault

Jun 10, 2024 GO-2024-2982

  GO-2024-2982: Hashicorp Vault vulnerable to Improper Check or Handling of Exceptional Conditions in github.com/hashicorp/vault

May 28, 2024 GO-2024-2921 +1 more

  GO-2024-2921: HashiCorp Vault Incorrectly Validated JSON Web Tokens (JWT) Audience Claims in github.com/hashicorp/vault

  GO-2024-2982: Hashicorp Vault vulnerable to Improper Check or Handling of Exceptional Conditions in github.com/hashicorp/vault

Apr 22, 2024 GO-2024-2921 +1 more

  GO-2024-2921: HashiCorp Vault Incorrectly Validated JSON Web Tokens (JWT) Audience Claims in github.com/hashicorp/vault

  GO-2024-2982: Hashicorp Vault vulnerable to Improper Check or Handling of Exceptional Conditions in github.com/hashicorp/vault

Apr 3, 2024 GO-2024-2921 +1 more

  GO-2024-2921: HashiCorp Vault Incorrectly Validated JSON Web Tokens (JWT) Audience Claims in github.com/hashicorp/vault

  GO-2024-2982: Hashicorp Vault vulnerable to Improper Check or Handling of Exceptional Conditions in github.com/hashicorp/vault

Mar 25, 2024 GO-2024-2921 +1 more

  GO-2024-2921: HashiCorp Vault Incorrectly Validated JSON Web Tokens (JWT) Audience Claims in github.com/hashicorp/vault

  GO-2024-2982: Hashicorp Vault vulnerable to Improper Check or Handling of Exceptional Conditions in github.com/hashicorp/vault

Mar 11, 2024 GO-2024-2690 +2 more

  GO-2024-2690: HashiCorpVault does not correctly validate OCSP responses in github.com/hashicorp/vault

  GO-2024-2921: HashiCorp Vault Incorrectly Validated JSON Web Tokens (JWT) Audience Claims in github.com/hashicorp/vault

  GO-2024-2982: Hashicorp Vault vulnerable to Improper Check or Handling of Exceptional Conditions in github.com/hashicorp/vault

Feb 20, 2024 GO-2024-2690 +2 more

  GO-2024-2690: HashiCorpVault does not correctly validate OCSP responses in github.com/hashicorp/vault

  GO-2024-2921: HashiCorp Vault Incorrectly Validated JSON Web Tokens (JWT) Audience Claims in github.com/hashicorp/vault

  GO-2024-2982: Hashicorp Vault vulnerable to Improper Check or Handling of Exceptional Conditions in github.com/hashicorp/vault

Feb 12, 2024 GO-2024-2690 +2 more

  GO-2024-2690: HashiCorpVault does not correctly validate OCSP responses in github.com/hashicorp/vault

  GO-2024-2921: HashiCorp Vault Incorrectly Validated JSON Web Tokens (JWT) Audience Claims in github.com/hashicorp/vault

  GO-2024-2982: Hashicorp Vault vulnerable to Improper Check or Handling of Exceptional Conditions in github.com/hashicorp/vault

Feb 28, 2024 GO-2024-2690 +2 more

  GO-2024-2690: HashiCorpVault does not correctly validate OCSP responses in github.com/hashicorp/vault

  GO-2024-2921: HashiCorp Vault Incorrectly Validated JSON Web Tokens (JWT) Audience Claims in github.com/hashicorp/vault

  GO-2024-2982: Hashicorp Vault vulnerable to Improper Check or Handling of Exceptional Conditions in github.com/hashicorp/vault

Jan 26, 2024 GO-2024-2690 +2 more

  GO-2024-2690: HashiCorpVault does not correctly validate OCSP responses in github.com/hashicorp/vault

  GO-2024-2921: HashiCorp Vault Incorrectly Validated JSON Web Tokens (JWT) Audience Claims in github.com/hashicorp/vault

  GO-2024-2982: Hashicorp Vault vulnerable to Improper Check or Handling of Exceptional Conditions in github.com/hashicorp/vault

Dec 5, 2023 GO-2024-2511 +4 more

  GO-2024-2511: Hashicorp Vault may expose sensitive log information in github.com/hashicorp/vault

  GO-2024-2617: Authentication bypass in github.com/hashicorp/vault

  GO-2024-2690: HashiCorpVault does not correctly validate OCSP responses in github.com/hashicorp/vault

  GO-2024-2921: HashiCorp Vault Incorrectly Validated JSON Web Tokens (JWT) Audience Claims in github.com/hashicorp/vault

  GO-2024-2982: Hashicorp Vault vulnerable to Improper Check or Handling of Exceptional Conditions in github.com/hashicorp/vault

Nov 22, 2023 GO-2023-2399 +5 more

  GO-2023-2399: Denial of service via memory exhaustion in github.com/hashicorp/vault

  GO-2024-2511: Hashicorp Vault may expose sensitive log information in github.com/hashicorp/vault

  GO-2024-2617: Authentication bypass in github.com/hashicorp/vault

  GO-2024-2690: HashiCorpVault does not correctly validate OCSP responses in github.com/hashicorp/vault

  GO-2024-2921: HashiCorp Vault Incorrectly Validated JSON Web Tokens (JWT) Audience Claims in github.com/hashicorp/vault

  GO-2024-2982: Hashicorp Vault vulnerable to Improper Check or Handling of Exceptional Conditions in github.com/hashicorp/vault

Nov 6, 2023 GO-2023-2399 +5 more

  GO-2023-2399: Denial of service via memory exhaustion in github.com/hashicorp/vault

  GO-2024-2511: Hashicorp Vault may expose sensitive log information in github.com/hashicorp/vault

  GO-2024-2617: Authentication bypass in github.com/hashicorp/vault

  GO-2024-2690: HashiCorpVault does not correctly validate OCSP responses in github.com/hashicorp/vault

  GO-2024-2921: HashiCorp Vault Incorrectly Validated JSON Web Tokens (JWT) Audience Claims in github.com/hashicorp/vault

  GO-2024-2982: Hashicorp Vault vulnerable to Improper Check or Handling of Exceptional Conditions in github.com/hashicorp/vault

Oct 20, 2023 GO-2023-2329 +6 more

  GO-2023-2329: HashiCorp Vault Missing Release of Memory after Effective Lifetime vulnerability in github.com/hashicorp/vault

  GO-2023-2399: Denial of service via memory exhaustion in github.com/hashicorp/vault

  GO-2024-2511: Hashicorp Vault may expose sensitive log information in github.com/hashicorp/vault

  GO-2024-2617: Authentication bypass in github.com/hashicorp/vault

  GO-2024-2690: HashiCorpVault does not correctly validate OCSP responses in github.com/hashicorp/vault

  GO-2024-2921: HashiCorp Vault Incorrectly Validated JSON Web Tokens (JWT) Audience Claims in github.com/hashicorp/vault

  GO-2024-2982: Hashicorp Vault vulnerable to Improper Check or Handling of Exceptional Conditions in github.com/hashicorp/vault

Sep 22, 2023 GO-2023-2329 +6 more

  GO-2023-2329: HashiCorp Vault Missing Release of Memory after Effective Lifetime vulnerability in github.com/hashicorp/vault

  GO-2023-2399: Denial of service via memory exhaustion in github.com/hashicorp/vault

  GO-2024-2511: Hashicorp Vault may expose sensitive log information in github.com/hashicorp/vault

  GO-2024-2617: Authentication bypass in github.com/hashicorp/vault

  GO-2024-2690: HashiCorpVault does not correctly validate OCSP responses in github.com/hashicorp/vault

  GO-2024-2921: HashiCorp Vault Incorrectly Validated JSON Web Tokens (JWT) Audience Claims in github.com/hashicorp/vault

  GO-2024-2982: Hashicorp Vault vulnerable to Improper Check or Handling of Exceptional Conditions in github.com/hashicorp/vault

Sep 11, 2023 GO-2024-2690 +2 more

  GO-2024-2690: HashiCorpVault does not correctly validate OCSP responses in github.com/hashicorp/vault

  GO-2024-2921: HashiCorp Vault Incorrectly Validated JSON Web Tokens (JWT) Audience Claims in github.com/hashicorp/vault

  GO-2024-2982: Hashicorp Vault vulnerable to Improper Check or Handling of Exceptional Conditions in github.com/hashicorp/vault

Feb 28, 2024 GO-2024-2690 +2 more

  GO-2024-2690: HashiCorpVault does not correctly validate OCSP responses in github.com/hashicorp/vault

  GO-2024-2921: HashiCorp Vault Incorrectly Validated JSON Web Tokens (JWT) Audience Claims in github.com/hashicorp/vault

  GO-2024-2982: Hashicorp Vault vulnerable to Improper Check or Handling of Exceptional Conditions in github.com/hashicorp/vault

Jan 29, 2024 GO-2024-2617 +3 more

  GO-2024-2617: Authentication bypass in github.com/hashicorp/vault

  GO-2024-2690: HashiCorpVault does not correctly validate OCSP responses in github.com/hashicorp/vault

  GO-2024-2921: HashiCorp Vault Incorrectly Validated JSON Web Tokens (JWT) Audience Claims in github.com/hashicorp/vault

  GO-2024-2982: Hashicorp Vault vulnerable to Improper Check or Handling of Exceptional Conditions in github.com/hashicorp/vault

Dec 5, 2023 GO-2024-2617 +3 more

  GO-2024-2617: Authentication bypass in github.com/hashicorp/vault

  GO-2024-2690: HashiCorpVault does not correctly validate OCSP responses in github.com/hashicorp/vault

  GO-2024-2921: HashiCorp Vault Incorrectly Validated JSON Web Tokens (JWT) Audience Claims in github.com/hashicorp/vault

  GO-2024-2982: Hashicorp Vault vulnerable to Improper Check or Handling of Exceptional Conditions in github.com/hashicorp/vault

Nov 21, 2023 GO-2023-2399 +4 more

  GO-2023-2399: Denial of service via memory exhaustion in github.com/hashicorp/vault

  GO-2024-2617: Authentication bypass in github.com/hashicorp/vault

  GO-2024-2690: HashiCorpVault does not correctly validate OCSP responses in github.com/hashicorp/vault

  GO-2024-2921: HashiCorp Vault Incorrectly Validated JSON Web Tokens (JWT) Audience Claims in github.com/hashicorp/vault

  GO-2024-2982: Hashicorp Vault vulnerable to Improper Check or Handling of Exceptional Conditions in github.com/hashicorp/vault

Nov 6, 2023 GO-2023-2399 +4 more

  GO-2023-2399: Denial of service via memory exhaustion in github.com/hashicorp/vault

  GO-2024-2617: Authentication bypass in github.com/hashicorp/vault

  GO-2024-2690: HashiCorpVault does not correctly validate OCSP responses in github.com/hashicorp/vault

  GO-2024-2921: HashiCorp Vault Incorrectly Validated JSON Web Tokens (JWT) Audience Claims in github.com/hashicorp/vault

  GO-2024-2982: Hashicorp Vault vulnerable to Improper Check or Handling of Exceptional Conditions in github.com/hashicorp/vault

Oct 20, 2023 GO-2023-2329 +5 more

  GO-2023-2329: HashiCorp Vault Missing Release of Memory after Effective Lifetime vulnerability in github.com/hashicorp/vault

  GO-2023-2399: Denial of service via memory exhaustion in github.com/hashicorp/vault

  GO-2024-2617: Authentication bypass in github.com/hashicorp/vault

  GO-2024-2690: HashiCorpVault does not correctly validate OCSP responses in github.com/hashicorp/vault

  GO-2024-2921: HashiCorp Vault Incorrectly Validated JSON Web Tokens (JWT) Audience Claims in github.com/hashicorp/vault

  GO-2024-2982: Hashicorp Vault vulnerable to Improper Check or Handling of Exceptional Conditions in github.com/hashicorp/vault

Sep 22, 2023 GO-2023-2329 +5 more

  GO-2023-2329: HashiCorp Vault Missing Release of Memory after Effective Lifetime vulnerability in github.com/hashicorp/vault

  GO-2023-2399: Denial of service via memory exhaustion in github.com/hashicorp/vault

  GO-2024-2617: Authentication bypass in github.com/hashicorp/vault

  GO-2024-2690: HashiCorpVault does not correctly validate OCSP responses in github.com/hashicorp/vault

  GO-2024-2921: HashiCorp Vault Incorrectly Validated JSON Web Tokens (JWT) Audience Claims in github.com/hashicorp/vault

  GO-2024-2982: Hashicorp Vault vulnerable to Improper Check or Handling of Exceptional Conditions in github.com/hashicorp/vault

Sep 11, 2023 GO-2023-2329 +5 more

  GO-2023-2329: HashiCorp Vault Missing Release of Memory after Effective Lifetime vulnerability in github.com/hashicorp/vault

  GO-2023-2399: Denial of service via memory exhaustion in github.com/hashicorp/vault

  GO-2024-2617: Authentication bypass in github.com/hashicorp/vault

  GO-2024-2690: HashiCorpVault does not correctly validate OCSP responses in github.com/hashicorp/vault

  GO-2024-2921: HashiCorp Vault Incorrectly Validated JSON Web Tokens (JWT) Audience Claims in github.com/hashicorp/vault

  GO-2024-2982: Hashicorp Vault vulnerable to Improper Check or Handling of Exceptional Conditions in github.com/hashicorp/vault

Aug 24, 2023 GO-2023-2063 +6 more

  GO-2023-2063: HashiCorp Vault Improper Input Validation vulnerability in github.com/hashicorp/vault

  GO-2023-2329: HashiCorp Vault Missing Release of Memory after Effective Lifetime vulnerability in github.com/hashicorp/vault

  GO-2023-2399: Denial of service via memory exhaustion in github.com/hashicorp/vault

  GO-2024-2617: Authentication bypass in github.com/hashicorp/vault

  GO-2024-2690: HashiCorpVault does not correctly validate OCSP responses in github.com/hashicorp/vault

  GO-2024-2921: HashiCorp Vault Incorrectly Validated JSON Web Tokens (JWT) Audience Claims in github.com/hashicorp/vault

  GO-2024-2982: Hashicorp Vault vulnerable to Improper Check or Handling of Exceptional Conditions in github.com/hashicorp/vault

Jul 21, 2023 GO-2023-2063 +6 more

  GO-2023-2063: HashiCorp Vault Improper Input Validation vulnerability in github.com/hashicorp/vault

  GO-2023-2329: HashiCorp Vault Missing Release of Memory after Effective Lifetime vulnerability in github.com/hashicorp/vault

  GO-2023-2399: Denial of service via memory exhaustion in github.com/hashicorp/vault

  GO-2024-2617: Authentication bypass in github.com/hashicorp/vault

  GO-2024-2690: HashiCorpVault does not correctly validate OCSP responses in github.com/hashicorp/vault

  GO-2024-2921: HashiCorp Vault Incorrectly Validated JSON Web Tokens (JWT) Audience Claims in github.com/hashicorp/vault

  GO-2024-2982: Hashicorp Vault vulnerable to Improper Check or Handling of Exceptional Conditions in github.com/hashicorp/vault

Jun 19, 2023 GO-2023-1986 +7 more

  GO-2023-1986: HashiCorp Vault and Vault Enterprise vulnerable to user enumeration in github.com/hashicorp/vault

  GO-2023-2063: HashiCorp Vault Improper Input Validation vulnerability in github.com/hashicorp/vault

  GO-2023-2329: HashiCorp Vault Missing Release of Memory after Effective Lifetime vulnerability in github.com/hashicorp/vault

  GO-2023-2399: Denial of service via memory exhaustion in github.com/hashicorp/vault

  GO-2024-2617: Authentication bypass in github.com/hashicorp/vault

  GO-2024-2690: HashiCorpVault does not correctly validate OCSP responses in github.com/hashicorp/vault

  GO-2024-2921: HashiCorp Vault Incorrectly Validated JSON Web Tokens (JWT) Audience Claims in github.com/hashicorp/vault

  GO-2024-2982: Hashicorp Vault vulnerable to Improper Check or Handling of Exceptional Conditions in github.com/hashicorp/vault

Changes in this version

+ type VaultPkiCluster struct

+ Dns *dnstest.TestServer

+ func NewVaultPkiCluster(t *testing.T) *VaultPkiCluster

+ func NewVaultPkiClusterWithDNS(t *testing.T) *VaultPkiCluster

+ func (vpc *VaultPkiCluster) AddDNSRecord(hostname, recordType, ip string) error

+ func (vpc *VaultPkiCluster) AddHostname(hostname, ip string) error

+ func (vpc *VaultPkiCluster) AddNameToHostFiles(hostname, ip string) error

+ func (vpc *VaultPkiCluster) Cleanup()

+ func (vpc *VaultPkiCluster) CreateAcmeMount(mountName string) (*VaultPkiMount, error)

+ func (vpc *VaultPkiCluster) CreateMount(name string) (*VaultPkiMount, error)

+ func (vpc *VaultPkiCluster) GetActiveClusterNode() *docker.DockerClusterNode

+ func (vpc *VaultPkiCluster) GetActiveContainerHostPort() string

+ func (vpc *VaultPkiCluster) GetActiveContainerID() string

+ func (vpc *VaultPkiCluster) GetActiveContainerIP() string

+ func (vpc *VaultPkiCluster) GetActiveNode() *api.Client

+ func (vpc *VaultPkiCluster) GetContainerNetworkName() string

+ func (vpc *VaultPkiCluster) GetListenerCACertPEM() []byte

+ func (vpc *VaultPkiCluster) GetNonActiveNodes() []*docker.DockerClusterNode

+ func (vpc *VaultPkiCluster) RemoveAllDNSRecords() error

+ func (vpc *VaultPkiCluster) RemoveDNSRecord(domain string, record string, value string) error

+ func (vpc *VaultPkiCluster) RemoveDNSRecordsForDomain(domain string) error

+ func (vpc *VaultPkiCluster) RemoveDNSRecordsOfTypeForDomain(domain string, record string) error

+ type VaultPkiMount struct

+ func (vpm *VaultPkiMount) GenerateIntermediateInternal(props map[string]interface{}) (*api.Secret, error)

+ func (vpm *VaultPkiMount) GenerateRootInternal(props map[string]interface{}) (*api.Secret, error)

+ func (vpm *VaultPkiMount) GetCACertPEM() (string, error)

+ func (vpm *VaultPkiMount) GetEabKey(acmeDirectory string) (string, string, error)

+ func (vpm *VaultPkiMount) ImportBundle(pemBundle interface{}, props map[string]interface{}) (*api.Secret, error)

+ func (vpm *VaultPkiMount) SignIntermediary(signingIssuer string, csr interface{}, props map[string]interface{}) (*api.Secret, error)

+ func (vpm *VaultPkiMount) UpdateAcmeConfig(enable bool, config map[string]interface{}) error

+ func (vpm *VaultPkiMount) UpdateClusterConfig(config map[string]interface{}) error

+ func (vpm *VaultPkiMount) UpdateClusterConfigLocalAddr() (string, error)

+ func (vpm *VaultPkiMount) UpdateDefaultIssuer(issuerId string, props map[string]interface{}) error

+ func (vpm *VaultPkiMount) UpdateIssuer(issuerRef string, props map[string]interface{}) error

+ func (vpm *VaultPkiMount) UpdateRole(roleName string, config map[string]interface{}) error

Jun 7, 2023 GO-2024-2617 +3 more

  GO-2024-2617: Authentication bypass in github.com/hashicorp/vault

  GO-2024-2690: HashiCorpVault does not correctly validate OCSP responses in github.com/hashicorp/vault

  GO-2024-2921: HashiCorp Vault Incorrectly Validated JSON Web Tokens (JWT) Audience Claims in github.com/hashicorp/vault

  GO-2024-2982: Hashicorp Vault vulnerable to Improper Check or Handling of Exceptional Conditions in github.com/hashicorp/vault