HashiCorp Vault and Vault Enterprise 1.5.1 and newer, under certain circumstances, may exclude revoked but unexpired certificates from the CRL. Fixed in 1.5.8, 1.6.4, and 1.7.1.
{
"cpe": [
"cpe:2.3:a:hashicorp:vault:*:*:*:*:-:*:*:*",
"cpe:2.3:a:hashicorp:vault:*:*:*:*:enterprise:*:*:*"
],
"extracted_events": [
{
"introduced": "1.5.1"
},
{
"fixed": "1.5.8"
},
{
"introduced": "1.6.0"
},
{
"fixed": "1.6.4"
},
{
"introduced": "1.7.0"
},
{
"fixed": "1.7.1"
}
],
"source": "CPE_RANGE"
}