Threats tagged 'bit-vault-2025-6015'

CVE-2025-6015 is a medium severity vulnerability in HashiCorp Vault and Vault Enterprise that allows bypassing login MFA rate limits and reusing TOTP tokens. This improper restriction of excessive authentication attempts could enable attackers to attempt multiple authentication tries without being blocked. The issue is fixed in Vault Community Edition 1.20.1 and Vault Enterprise versions 1.20.1, 1.19.7, 1.18.12, and 1.16.23.