CyberArk and HashiCorp Flaws Enable Remote Vault Takeover Without Credentials
Cybersecurity researchers have identified 14 vulnerabilities in CyberArk and HashiCorp's enterprise secure vaults, collectively known as Vault Fault. These vulnerabilities could allow remote attackers to access corporate identity systems and extract sensitive enterprise secrets and tokens.