CVE-2020-35177: 
HashiCorp Vault vulnerability analysis and mitigation

HashiCorp Vault and Vault Enterprise 1.4.1 and newer allowed the enumeration of users via the LDAP auth method. This vulnerability, identified as CVE-2020-35177, was discovered and fixed in versions 1.5.6 and 1.6.1 (Vendor Advisory).

The vulnerability was related to the LDAP authentication method in HashiCorp Vault, where error messages returned by Vault's LDAP auth method could be used to enumerate LDAP users. The vulnerability has a CVSS v3.1 Base Score of 5.3 (MEDIUM) with a vector string of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N (NVD).

The vulnerability allowed attackers to enumerate valid LDAP users through error message analysis. This could potentially be used as part of a broader attack strategy to identify valid user accounts within an organization's LDAP directory (Vendor Advisory).

An external party could submit requests for both existent and non-existent LDAP users and observe the responses from Vault to determine if an account was valid on the LDAP server (Vendor Advisory).

Users should upgrade to Vault or Vault Enterprise version 1.5.6, 1.6.1, or newer to address this vulnerability. The fix was implemented in these versions to prevent user enumeration through the LDAP auth method (Vendor Advisory, Release Notes).