CVE-2025-6015

LLM-synthesized narrative grounded in this CVE's description and references.

Versions sourced from the GitHub Security Advisory.

• Hashicorp/Vault4 versions

  cpe:2.3:a:hashicorp:vault:*:*:*:*:-:*:*:*+ 3 more

  • cpe:2.3:a:hashicorp:vault:*:*:*:*:-:*:*:*range: >=1.10.0,<1.20.1
  • cpe:2.3:a:hashicorp:vault:*:*:*:*:enterprise:*:*:*range: >=1.10.0,<1.16.23
  • cpe:2.3:a:hashicorp:vault:1.20.0:*:*:*:enterprise:*:*:*
  • (no CPE)range: 1.10.0
• osv-coords9 versions

  pkg:apk/chainguard/splunk-otel-collectorpkg:apk/chainguard/splunk-otel-collector-fipspkg:apk/wolfi/splunk-otel-collectorpkg:bitnami/vaultpkg:golang/github.com/hashicorp/vaultpkg:rpm/opensuse/govulncheck-vulndb&distro=openSUSE%20Leap%2015.6pkg:rpm/opensuse/govulncheck-vulndb&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/openbao&distro=openSUSE%20Tumbleweedpkg:rpm/suse/govulncheck-vulndb&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP6

  < 0.138.0-r0+ 8 more

  • (no CPE)range: < 0.138.0-r0
  • (no CPE)range: < 0.138.0-r1
  • (no CPE)range: < 0.138.0-r0
  • (no CPE)range: >= 1.10.0, < 1.20.1
  • (no CPE)range: >= 1.10.0, < 1.20.1
  • (no CPE)range: < 0.0.20250814T182633-150000.1.98.1
  • (no CPE)range: < 0.0.20250811T192933-1.1
  • (no CPE)range: < 2.3.2-1.1
  • (no CPE)range: < 0.0.20250814T182633-150000.1.98.1
• Hashicorp/Vault Enterprisecpe-rescue

  Range: 1.10.0

• discuss.hashicorp.com/t/hcsec-2025-19-vault-login-mfa-bypass-of-rate-limiting-and-totp-token-reuse/76038nvdVendor AdvisoryWEB
• github.com/advisories/GHSA-v6r4-35f9-9rpwghsaADVISORY
• nvd.nist.gov/vuln/detail/CVE-2025-6015ghsaADVISORY

No linked articles in our index yet.