Headline
GHSA-j2rp-gmqv-frhv: HashiCorpVault does not correctly validate OCSP responses
Vault and Vault Enterprise TLS certificates auth method did not correctly validate OCSP responses when one or more OCSP sources were configured. Fixed in Vault 1.16.0 and Vault Enterprise 1.16.1, 1.15.7, and 1.14.11.
HashiCorpVault does not correctly validate OCSP responses
Moderate severity GitHub Reviewed Published Apr 4, 2024 to the GitHub Advisory Database • Updated Apr 4, 2024