[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f7GjgZZVzdfZwZwWPVTO-Qp0FUzLnB13aVwvMdAeuVHc":3,"g5a-risk:CVE-2020-16250":157},{"success":4,"data":5,"meta":155},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":26,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":47,"references":48,"referencesCount":66,"weaknesses":67,"weaknessesCount":82,"isActivelyExploited":83,"cisaInfo":26,"otxData":26,"relatedBlogPosts":84,"seoMetadata":85,"configurations":110,"relatedVendorCves":153,"notableEvents":154},"CVE-2020-16250","What is CVE-2020-16250?","HashiCorp Vault and Vault Enterprise versions 0.7.1 and newer, when configured with the AWS IAM auth method, may be vulnerable to authentication bypass. Fixed in 1.2.5, 1.3.8, 1.4.4, and 1.5.1..","HashiCorp Vault and Vault Enterprise versions 0.7.1 and newer, when configured with the AWS IAM auth method, may be vulnerable to authentication bypass. Fixe...","2020-08-26T15:15:12.85","2023-08-29T17:13:35.687",8.2,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":25,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,4.2,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":25,"ExploitabilityScore":36,"ImpactScore":37,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":34,"IntegrityImpact":34,"AvailabilityImpact":34,"BaseScore":35,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.01461,[38,38,38,38,38,38,38],"High",[42],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"hashicorp","vault","*","cpe:2.3:a:hashicorp:vault:*:*:*:*:-:*:*:*",1,[49,55,61],{"url":50,"source":51,"tags":52},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F159478\u002FHashicorp-Vault-AWS-IAM-Integration-Authentication-Bypass.html","Packetstormsecurity",[53,54],"Third Party Advisory","VDB Entry",{"url":56,"source":57,"tags":58},"https:\u002F\u002Fgithub.com\u002Fhashicorp\u002Fvault\u002Fblob\u002Fmaster\u002FCHANGELOG.md#151","GitHub",[59,60],"Release Notes","Vendor Advisory",{"url":62,"source":63,"tags":64},"https:\u002F\u002Fwww.hashicorp.com\u002Fblog\u002Fcategory\u002Fvault\u002F","Hashicorp",[65,60],"Product",3,[68,76],{"id":69,"name":70,"description":71,"extendedDescription":72,"status":73,"abstraction":74,"structure":75},"CWE-290","Authentication Bypass by Spoofing","This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.","","Incomplete","Base","Simple",{"id":77,"name":78,"description":79,"extendedDescription":72,"status":80,"abstraction":81,"structure":75},"CWE-345","Insufficient Verification of Data Authenticity","The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.","Draft","Class",2,false,[],{"title":86,"metaDescription":87,"keywords":88,"canonicalUrl":89,"structuredData":90},"What is CVE-2020-16250? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2020-16250, a high severity cyber security vulnerability from 2020. HashiCorp Vault and Vault Enterprise versions 0.7.1 and new...","CVE-2020-16250, CVE-2020-16250 vulnerability, CVE-2020-16250 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, hashicorp security, vault vulnerability","\u002Fwhat-is\u002Fcve-2020-16250",{"@context":91,"@type":92,"headline":86,"description":87,"datePublished":10,"dateModified":11,"author":93,"publisher":97,"about":101,"mainEntityOfPage":105,"articleSection":108,"keywords":109},"https:\u002F\u002Fschema.org","TechArticle",{"@type":94,"name":95,"url":96},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":94,"name":95,"url":96,"logo":98},{"@type":99,"url":100},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":102,"name":6,"description":103,"additionalType":104},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":106,"@id":107},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2020-16250","Cybersecurity","CVE-2020-16250, CVE-2020-16250 vulnerability, CVE-2020-16250 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[111,123,133,143],{"Operator":26,"Negate":26,"Nodes":112},[113],{"Operator":114,"Negate":26,"CPEMatch":115},"OR",[116,120],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":117,"VersionStartExcluding":26,"VersionStartIncluding":118,"VersionEndExcluding":119,"VersionEndIncluding":26},"D2494214-E6B2-4322-AA79-CC4AE1959760","0.7.1","1.2.5",{"Vulnerable":4,"Criteria":121,"MatchCriteriaID":122,"VersionStartExcluding":26,"VersionStartIncluding":118,"VersionEndExcluding":119,"VersionEndIncluding":26},"cpe:2.3:a:hashicorp:vault:*:*:*:*:enterprise:*:*:*","24DC6241-A2AA-45DD-B2E9-82DEE9FF0DB2",{"Operator":26,"Negate":26,"Nodes":124},[125],{"Operator":114,"Negate":26,"CPEMatch":126},[127,131],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":128,"VersionStartExcluding":26,"VersionStartIncluding":129,"VersionEndExcluding":130,"VersionEndIncluding":26},"78915E16-7E2F-4DDA-89FF-1751B6546FC2","1.3.0","1.3.8",{"Vulnerable":4,"Criteria":121,"MatchCriteriaID":132,"VersionStartExcluding":26,"VersionStartIncluding":129,"VersionEndExcluding":130,"VersionEndIncluding":26},"269A36BC-B728-4AFA-B08B-0C04B22DFEC9",{"Operator":26,"Negate":26,"Nodes":134},[135],{"Operator":114,"Negate":26,"CPEMatch":136},[137,141],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":138,"VersionStartExcluding":26,"VersionStartIncluding":139,"VersionEndExcluding":140,"VersionEndIncluding":26},"E03B11E5-953A-4D0E-A75C-87F43BE0F323","1.4.0","1.4.4",{"Vulnerable":4,"Criteria":121,"MatchCriteriaID":142,"VersionStartExcluding":26,"VersionStartIncluding":139,"VersionEndExcluding":140,"VersionEndIncluding":26},"68A9A5AE-CC39-4296-95AF-6E2C13C64C51",{"Operator":26,"Negate":26,"Nodes":144},[145],{"Operator":114,"Negate":26,"CPEMatch":146},[147,151],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":148,"VersionStartExcluding":26,"VersionStartIncluding":149,"VersionEndExcluding":150,"VersionEndIncluding":26},"894E4573-D9DF-4357-AAA8-50CA95A4CD2B","1.5.0","1.5.1",{"Vulnerable":4,"Criteria":121,"MatchCriteriaID":152,"VersionStartExcluding":26,"VersionStartIncluding":149,"VersionEndExcluding":150,"VersionEndIncluding":26},"6813A54F-6259-40AA-BBF5-90DB0480813D",[],[],{"lastModified":11,"cacheTime":156,"version":32},1793216242159,{"score":158,"band":159,"action":160,"scoredAt":161},48,"Medium","Plan remediation","2026-07-01T10:25:21.151655+00:00"]