[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fcF1I0UuccIA94R6U5cPy8uI-HppjVChKfskNSK1LEQI":3,"g5a-risk:CVE-2020-16251":166},{"success":4,"data":5,"meta":164},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":26,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":47,"references":48,"referencesCount":66,"weaknesses":67,"weaknessesCount":47,"isActivelyExploited":76,"cisaInfo":26,"otxData":26,"relatedBlogPosts":77,"seoMetadata":78,"configurations":103,"relatedVendorCves":162,"notableEvents":163},"CVE-2020-16251","What is CVE-2020-16251?","HashiCorp Vault and Vault Enterprise versions 0.8.3 and newer, when configured with the GCP GCE auth method, may be vulnerable to authentication bypass. Fixed in 1.2.5, 1.3.8, 1.4.4, and 1.5.1.","HashiCorp Vault and Vault Enterprise versions 0.8.3 and newer, when configured with the GCP GCE auth method, may be vulnerable to authentication bypass. Fixe...","2020-08-26T15:15:12.913","2023-08-29T17:55:10.11",8.2,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":25,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,4.2,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":25,"ExploitabilityScore":36,"ImpactScore":37,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":34,"IntegrityImpact":34,"AvailabilityImpact":34,"BaseScore":35,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.02828,[38,38,38,38,38,38,38],"High",[42],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"hashicorp","vault","*","cpe:2.3:a:hashicorp:vault:*:*:*:*:enterprise:*:*:*",1,[49,55,60],{"url":50,"source":51,"tags":52},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F159479\u002FHashicorp-Vault-GCP-IAM-Integration-Authentication-Bypass.html","Packetstormsecurity",[53,54],"Third Party Advisory","VDB Entry",{"url":56,"source":57,"tags":58},"https:\u002F\u002Fgithub.com\u002Fhashicorp\u002Fvault\u002Fblob\u002Fmaster\u002FCHANGELOG.md#151","GitHub",[59,53],"Release Notes",{"url":61,"source":62,"tags":63},"https:\u002F\u002Fwww.hashicorp.com\u002Fblog\u002Fcategory\u002Fvault\u002F","Hashicorp",[64,65],"Product","Vendor Advisory",3,[68],{"id":69,"name":70,"description":71,"extendedDescription":72,"status":73,"abstraction":74,"structure":75},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",false,[],{"title":79,"metaDescription":80,"keywords":81,"canonicalUrl":82,"structuredData":83},"What is CVE-2020-16251? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-16251, a high severity cyber security vulnerability from 2020. HashiCorp Vault and Vault Enterprise versions 0.8.3 and new...","CVE-2020-16251, CVE-2020-16251 vulnerability, CVE-2020-16251 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, hashicorp security, vault vulnerability","\u002Fwhat-is\u002Fcve-2020-16251",{"@context":84,"@type":85,"headline":79,"description":80,"datePublished":10,"dateModified":11,"author":86,"publisher":90,"about":94,"mainEntityOfPage":98,"articleSection":101,"keywords":102},"https:\u002F\u002Fschema.org","TechArticle",{"@type":87,"name":88,"url":89},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":87,"name":88,"url":89,"logo":91},{"@type":92,"url":93},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":95,"name":6,"description":96,"additionalType":97},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":99,"@id":100},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-16251","Cybersecurity","CVE-2020-16251, CVE-2020-16251 vulnerability, CVE-2020-16251 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[104,113,121,129,137,144,150,156],{"Operator":26,"Negate":26,"Nodes":105},[106],{"Operator":107,"Negate":26,"CPEMatch":108},"OR",[109],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":110,"VersionStartExcluding":26,"VersionStartIncluding":111,"VersionEndExcluding":112,"VersionEndIncluding":26},"85BEB94C-3B3C-4088-9E5E-85877E1F6497","0.8.3","1.2.5",{"Operator":26,"Negate":26,"Nodes":114},[115],{"Operator":107,"Negate":26,"CPEMatch":116},[117],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":118,"VersionStartExcluding":26,"VersionStartIncluding":119,"VersionEndExcluding":120,"VersionEndIncluding":26},"269A36BC-B728-4AFA-B08B-0C04B22DFEC9","1.3.0","1.3.8",{"Operator":26,"Negate":26,"Nodes":122},[123],{"Operator":107,"Negate":26,"CPEMatch":124},[125],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":126,"VersionStartExcluding":26,"VersionStartIncluding":127,"VersionEndExcluding":128,"VersionEndIncluding":26},"68A9A5AE-CC39-4296-95AF-6E2C13C64C51","1.4.0","1.4.4",{"Operator":26,"Negate":26,"Nodes":130},[131],{"Operator":107,"Negate":26,"CPEMatch":132},[133],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":134,"VersionStartExcluding":26,"VersionStartIncluding":135,"VersionEndExcluding":136,"VersionEndIncluding":26},"6813A54F-6259-40AA-BBF5-90DB0480813D","1.5.0","1.5.1",{"Operator":26,"Negate":26,"Nodes":138},[139],{"Operator":107,"Negate":26,"CPEMatch":140},[141],{"Vulnerable":4,"Criteria":142,"MatchCriteriaID":143,"VersionStartExcluding":26,"VersionStartIncluding":111,"VersionEndExcluding":112,"VersionEndIncluding":26},"cpe:2.3:a:hashicorp:vault:*:*:*:*:-:*:*:*","A21DD5AC-CEBA-4AC2-9CD2-42F40DB11C06",{"Operator":26,"Negate":26,"Nodes":145},[146],{"Operator":107,"Negate":26,"CPEMatch":147},[148],{"Vulnerable":4,"Criteria":142,"MatchCriteriaID":149,"VersionStartExcluding":26,"VersionStartIncluding":119,"VersionEndExcluding":120,"VersionEndIncluding":26},"78915E16-7E2F-4DDA-89FF-1751B6546FC2",{"Operator":26,"Negate":26,"Nodes":151},[152],{"Operator":107,"Negate":26,"CPEMatch":153},[154],{"Vulnerable":4,"Criteria":142,"MatchCriteriaID":155,"VersionStartExcluding":26,"VersionStartIncluding":127,"VersionEndExcluding":128,"VersionEndIncluding":26},"E03B11E5-953A-4D0E-A75C-87F43BE0F323",{"Operator":26,"Negate":26,"Nodes":157},[158],{"Operator":107,"Negate":26,"CPEMatch":159},[160],{"Vulnerable":4,"Criteria":142,"MatchCriteriaID":161,"VersionStartExcluding":26,"VersionStartIncluding":135,"VersionEndExcluding":136,"VersionEndIncluding":26},"894E4573-D9DF-4357-AAA8-50CA95A4CD2B",[],[],{"lastModified":11,"cacheTime":165,"version":32},1792436156251,{"score":167,"band":168,"action":169,"scoredAt":170},48,"Medium","Plan remediation","2026-10-16T06:49:14.777782+00:00"]