CVE-2022-30689

MEDIUM · CVSS 5.3 EPSS 1.16%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-05-17 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2022-30689

Severity

MEDIUM

CVSS

5.3

EPSS

1.16%

Original NVD Description

HashiCorp Vault and Vault Enterprise from 1.10.0 to 1.10.2 did not correctly configure and enforce MFA on login after server restarts. This affects the Login MFA feature introduced in Vault and Vault Enterprise 1.10.0 and does not affect the separate Enterprise MFA feature set. Fixed in 1.10.3.