Files
CVEs-PoC/2025/CVE-2025-6015.md
T
2025-09-29 21:09:30 +02:00

851 B
Raw Blame History

CVE-2025-6015

Description

Vault and Vault Enterprises (“Vault”) login MFA rate limits could be bypassed and TOTP tokens could be reused. Fixed in Vault Community Edition 1.20.1 and Vault Enterprise 1.20.1, 1.19.7, 1.18.12, and 1.16.23.

POC

Reference

No PoCs from references.

Github