[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f2fXrB8MvGQKiLf48GDZs5Re4facnQQ--l2BhOb3WBLc":3,"g5a-risk:CVE-2020-12757":114},{"success":4,"data":5,"meta":112},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":27,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":48,"references":49,"referencesCount":60,"weaknesses":61,"weaknessesCount":48,"isActivelyExploited":70,"cisaInfo":27,"otxData":27,"relatedBlogPosts":71,"seoMetadata":72,"configurations":97,"relatedVendorCves":110,"notableEvents":111},"CVE-2020-12757","What is CVE-2020-12757?","HashiCorp Vault and Vault Enterprise 1.4.0 and 1.4.1, when configured with the GCP Secrets Engine, may incorrectly generate GCP Credentials with the default time-to-live lease duration instead of the engine-configured setting. This may lead to generated GCP credentials being valid for longer than intended. Fixed in 1.4.2.","HashiCorp Vault and Vault Enterprise 1.4.0 and 1.4.1, when configured with the GCP Secrets Engine, may incorrectly generate GCP Credentials with the default ...","2020-06-10T19:15:09.647","2020-10-12T19:15:12.13",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":25,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.01522,[39,39,39,39,39,39,39],"Critical",[43],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"hashicorp","vault","*","cpe:2.3:a:hashicorp:vault:*:*:*:*:-:*:*:*",1,[50,56],{"url":51,"source":52,"tags":53},"https:\u002F\u002Fgithub.com\u002Fhashicorp\u002Fvault\u002Fblob\u002Fmaster\u002FCHANGELOG.md#142-may-21st-2020","GitHub",[54,55],"Release Notes","Vendor Advisory",{"url":57,"source":58,"tags":59},"https:\u002F\u002Fwww.hashicorp.com\u002Fblog\u002Fcategory\u002Fvault\u002F","Hashicorp",[55],2,[62],{"id":63,"name":64,"description":65,"extendedDescription":66,"status":67,"abstraction":68,"structure":69},"CWE-269","Improper Privilege Management","The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.","","Draft","Class","Simple",false,[],{"title":73,"metaDescription":74,"keywords":75,"canonicalUrl":76,"structuredData":77},"What is CVE-2020-12757? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-12757, a critical severity cyber security vulnerability from 2020. HashiCorp Vault and Vault Enterprise 1.4.0 and 1.4.1, w...","CVE-2020-12757, CVE-2020-12757 vulnerability, CVE-2020-12757 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, hashicorp security, vault vulnerability","\u002Fwhat-is\u002Fcve-2020-12757",{"@context":78,"@type":79,"headline":73,"description":74,"datePublished":10,"dateModified":11,"author":80,"publisher":84,"about":88,"mainEntityOfPage":92,"articleSection":95,"keywords":96},"https:\u002F\u002Fschema.org","TechArticle",{"@type":81,"name":82,"url":83},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":81,"name":82,"url":83,"logo":85},{"@type":86,"url":87},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":89,"name":6,"description":90,"additionalType":91},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":93,"@id":94},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-12757","Cybersecurity","CVE-2020-12757, CVE-2020-12757 vulnerability, CVE-2020-12757 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[98],{"Operator":27,"Negate":27,"Nodes":99},[100],{"Operator":101,"Negate":27,"CPEMatch":102},"OR",[103,107],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":104,"VersionStartExcluding":27,"VersionStartIncluding":105,"VersionEndExcluding":106,"VersionEndIncluding":27},"FA54C14C-F7C4-4F67-8296-A51845AB63D8","1.4.0","1.4.2",{"Vulnerable":4,"Criteria":108,"MatchCriteriaID":109,"VersionStartExcluding":27,"VersionStartIncluding":105,"VersionEndExcluding":106,"VersionEndIncluding":27},"cpe:2.3:a:hashicorp:vault:*:*:*:*:enterprise:*:*:*","6F97F1E0-06E3-4793-B71F-B0C24D1C674A",[],[],{"lastModified":11,"cacheTime":113,"version":33},1792439858701,{"score":115,"band":116,"action":117,"scoredAt":118},54,"Medium","Plan remediation","2026-10-16T06:48:48.148364+00:00"]