CVE-2020-35177

CVE-2020-35177

HashiCorp Vault and Vault Enterprise allowed the enumeration of users via the LDAP auth method. Fixed in 1.5.6 and 1.6.1.

Source: CVE-2020-35177