PANews reported on August 7th that HashiCorp Vault, a wallet and key management tool widely used in the cryptocurrency industry, has recently been exposed to multiple zero-day vulnerabilities, covering key aspects such as authentication, identification, and authorization. Some of these vulnerabilities can bypass lockdown and multi-factor authentication protections, and even allow attackers to achieve remote code execution (RCE), posing a serious threat to infrastructure security. The Cyata team has collaborated with HashiCorp to complete the fixes. SlowMist Technology's Chief Information Security Officer, 23pds, recommends that relevant organizations upgrade to the latest version as soon as possible to mitigate potential risks.
HashiCorp Vault exposed multiple zero-day vulnerabilities involving authentication and remote code execution
Share to:
Author: PA一线
This content is for informational purposes only and does not constitute investment advice.
Follow PANews official accounts, navigate bull and bear markets together
Recommended Reading
