TechFlow, August 7 — SlowMist Chief Information Security Officer 23pds reported that a 0-day vulnerability has been discovered in the cryptocurrency wallet solution HashiCorp Vault, involving authentication and authorization, as well as remote code execution. Some of these vulnerabilities can bypass lockout and multi-factor authentication protections, potentially allowing attackers to achieve remote code execution (RCE), posing a severe threat to infrastructure security. The Cyata team has collaborated with HashiCorp to complete the fix, and relevant organizations are advised to upgrade to the latest version as soon as possible.
Add to Favorites
Share to Social Media
