CVE-2025-6015
- Source
- https://cve.org/CVERecord?id=CVE-2025-6015
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-6015.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2025-6015
- Aliases
- Downstream
- Related
- Published
- 2025-08-01T18:15:57.010Z
- Modified
- 2026-03-23T05:01:51.201657483Z
- Severity
-
- 5.7 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N CVSS Calculator
- Summary
- [none]
- Details
-
Vault and Vault Enterprise’s (“Vault”) login MFA rate limits could be bypassed and TOTP tokens could be reused. Fixed in Vault Community Edition 1.20.1 and Vault Enterprise 1.20.1, 1.19.7, 1.18.12, and 1.16.23.
- References
Affected packages
Git / github.com/hashicorp/vault
Affected ranges
- Type
- GIT
- Repo
- https://github.com/hashicorp/vault
- Events
-
IntroducedFixedIntroduced0 Unknown introduced commit / All previous commits are affectedLast affected
- Database specific
{ "versions": [ { "introduced": "1.10.0" }, { "fixed": "1.20.1" }, { "introduced": "0" }, { "last_affected": "1.20.0" } ] }
Database specific
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-6015.json"
unresolved_ranges
[
{
"events": [
{
"introduced": "1.10.0"
},
{
"fixed": "1.16.23"
}
]
},
{
"events": [
{
"introduced": "1.17.0"
},
{
"fixed": "1.18.12"
}
]
},
{
"events": [
{
"introduced": "1.19.0"
},
{
"fixed": "1.19.7"
}
]
}
]