← CVE Intelligence

CVE-2025-6014

Vault TOTP Secrets Engine Code Reuse PUBLISHED

Description (CNA)

Vault and Vault Enterprise’s (“Vault”) TOTP Secrets Engine code validation endpoint is susceptible to code reuse within its validity period. Fixed in Vault Community Edition 1.20.1 and Vault Enterprise 1.20.1, 1.19.7, 1.18.12, and 1.16.23.

Affected (CNA)

Vendor / productVersions
HashiCorp / Vaultaffected 0 before 1.20.1
HashiCorp / Vault Enterpriseaffected 0 before 1.20.1

CWE

CWE-156

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.