Threats tagged 'bit-vault-2025-6004'

CVE-2025-6004 is a medium severity vulnerability in HashiCorp Vault affecting the user lockout feature for Userpass and LDAP authentication methods. This flaw allows bypassing the lockout mechanism designed to restrict excessive authentication attempts. The issue is fixed in Vault Community Edition 1.20.1 and Vault Enterprise versions 1.20.1, 1.19.7, 1.18.12, and 1.16.23.