Detections
Analytics
SCA: security update for github.com/hashicorp/vault (GHSA-7rx2-769v-hrwf)
high Tenable Cloud Security Plugin ID 431690
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- Vault and Vault Enterprise’s (“Vault”) ldap auth method may not have correctly enforced MFA if
username_as_alias was set to true and a user had multiple CNs that are equal but with leading or trailing
spaces. Fixed in Vault Community Edition 1.20.2 and Vault Enterprise 1.20.2, 1.19.8, 1.18.13, and 1.16.24.
(CVE-2025-6013)
See Also
Plugin Details
Severity: High
ID: 431690
Version: Revision 1.12
Type: Local
Family: SCA Checks
Published: 8/6/2025
Updated: 7/2/2026
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Medium
Score: 4.3
Percentile: 53.37
Vendor
Vendor Severity: Medium
CVSS v2
Risk Factor: High
Base Score: 8.5
Temporal Score: 6.3
Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:N
CVSS Score Source: CVE-2025-6013
CVSS v3
Risk Factor: High
Base Score: 8.1
Temporal Score: 7.1
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 8/6/2025
Vulnerability Publication Date: 8/6/2025
Reference Information
CVE: CVE-2025-6013
cwe: CWE-156