Affected by GO-2022-0611 and 28 other vulnerabilities

GO-2022-0611: HashiCorp Vault Incorrect Permission Assignment for Critical Resource in github.com/hashicorp/vault

GO-2022-0618: Hashicorp Vault Privilege Escalation Vulnerability in github.com/hashicorp/vault

GO-2022-0623: Invalid session token expiration in github.com/hashicorp/vault

GO-2022-0632: Improper Removal of Sensitive Information Before Storage or Transfer in HashiCorp Vault in github.com/hashicorp/vault

GO-2022-0816: Improper Resource Shutdown or Release in HashiCorp Vault in github.com/hashicorp/vault

GO-2022-0825: Authentication Bypass by Spoofing and Insufficient Verification of Data Authenticity in Hashicorp Vault in github.com/hashicorp/vault

GO-2023-1685: HashiCorp Vault’s Microsoft SQL Database Storage Backend Vulnerable to SQL Injection Via Configuration File in github.com/hashicorp/vault

GO-2023-1708: HashiCorp Vault's PKI mount vulnerable to denial of service in github.com/hashicorp/vault

GO-2023-1849: Hashicorp Vault vulnerable to Cross-site Scripting in github.com/hashicorp/vault

GO-2023-1897: HashiCorp Vault's revocation list not respected in github.com/hashicorp/vault

GO-2023-1900: Hashicorp Vault Fails to Verify if Approle SecretID Belongs to Role During a Destroy Operation in github.com/hashicorp/vault

GO-2023-1986: HashiCorp Vault and Vault Enterprise vulnerable to user enumeration in github.com/hashicorp/vault

GO-2023-2088: Hashicorp Vault Incorrect Permission Assignment for Critical Resource vulnerability in github.com/hashicorp/vault

GO-2023-2329: HashiCorp Vault Missing Release of Memory after Effective Lifetime vulnerability in github.com/hashicorp/vault

GO-2024-2485: HashiCorp Vault Improper Privilege Management in github.com/hashicorp/vault

GO-2024-2486: HashiCorp Vault Improper Privilege Management in github.com/hashicorp/vault

GO-2024-2488: HashiCorp Vault Authentication bypass in github.com/hashicorp/vault

GO-2024-2617: Authentication bypass in github.com/hashicorp/vault

GO-2024-2690: HashiCorpVault does not correctly validate OCSP responses in github.com/hashicorp/vault

GO-2024-2921: HashiCorp Vault Incorrectly Validated JSON Web Tokens (JWT) Audience Claims in github.com/hashicorp/vault

GO-2024-3191: Vault Community Edition privilege escalation vulnerability in github.com/hashicorp/vault

GO-2025-3663: Hashicorp Vault Community vulnerable to Generation of Error Message Containing Sensitive Information in github.com/hashicorp/vault

GO-2025-3836: Hashicorp Vault has Incorrect Validation for Non-CA Certificates in github.com/hashicorp/vault

GO-2025-3837: Hashicorp Vault has Privilege Escalation Vulnerability in github.com/hashicorp/vault

GO-2025-3838: Hashicorp Vault has Code Execution Vulnerability via Plugin Configuration in github.com/hashicorp/vault

GO-2025-3839: Hashicorp Vault has an Observable Discrepancy on Existing and Non-Existing Users in github.com/hashicorp/vault

GO-2025-3841: Hashicorp Vault's TOTP Secrets Engine Susceptible to Code Reuse in github.com/hashicorp/vault

GO-2025-3848: HashiCorp Vault ldap auth method may not have correctly enforced MFA in github.com/hashicorp/vault

GO-2025-3924: HashiCorp Vault Community Edition Denial of Service Though Complex JSON Payloads in github.com/hashicorp/vault

cassandra

package

v0.11.1 Latest Latest Go to latest Published: Sep 6, 2018 License: MPL-2.0 Imports: 20 Imported by: 73

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/hashicorp/vault

Links

Open Source Insights

Documentation ¶

Index ¶

func New() (interface{}, error)
func Run(apiTLSConfig *api.TLSConfig) error
type Cassandra

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func New ¶

func New() (interface{}, error)

New returns a new Cassandra instance

func Run ¶

func Run(apiTLSConfig *api.TLSConfig) error

Run instantiates a Cassandra object, and runs the RPC server for the plugin

Types ¶

type Cassandra ¶

type Cassandra struct {
	credsutil.CredentialsProducer
	// contains filtered or unexported fields
}

Cassandra is an implementation of Database interface

func (Cassandra) Close ¶ added in v0.10.0

func (c Cassandra) Close() error

func (Cassandra) Connection ¶ added in v0.10.0

func (c Cassandra) Connection(_ context.Context) (interface{}, error)

func (*Cassandra) CreateUser ¶

func (c *Cassandra) CreateUser(ctx context.Context, statements dbplugin.Statements, usernameConfig dbplugin.UsernameConfig, expiration time.Time) (username string, password string, err error)

CreateUser generates the username/password on the underlying Cassandra secret backend as instructed by the CreationStatement provided.

func (Cassandra) Init ¶ added in v0.10.0

func (c Cassandra) Init(ctx context.Context, conf map[string]interface{}, verifyConnection bool) (map[string]interface{}, error)

func (Cassandra) Initialize ¶ added in v0.10.0

func (c Cassandra) Initialize(ctx context.Context, conf map[string]interface{}, verifyConnection bool) error

func (*Cassandra) RenewUser ¶

func (c *Cassandra) RenewUser(ctx context.Context, statements dbplugin.Statements, username string, expiration time.Time) error

RenewUser is not supported on Cassandra, so this is a no-op.

func (*Cassandra) RevokeUser ¶

func (c *Cassandra) RevokeUser(ctx context.Context, statements dbplugin.Statements, username string) error

RevokeUser attempts to drop the specified user.

func (*Cassandra) RotateRootCredentials ¶ added in v0.10.0

func (c *Cassandra) RotateRootCredentials(ctx context.Context, statements []string) (map[string]interface{}, error)

func (*Cassandra) Type ¶

func (c *Cassandra) Type() (string, error)

Type returns the TypeName for this backend

Source Files ¶

View all Source files

Directories ¶

Path	Synopsis
cassandra-database-plugin

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL