Advisories · Weakness
CWE-156.
Every Advisory and CVE whose sources give the weakness CWE-156, newest first.
- CVSS 5.4 Medium
HackerOne community member Dao Hoang Anh (yoyomiski) has reported an improper neutralization of whitespace in the username when adding new users.
- Revive Adserver
- CWE-156
- CVSS 6.5 Medium
OpenBao LDAP MFA Enforcement Bypass When Using Username As Alias
- CWE-156
<0.0.0-20250807212521-c52795c1ef74 || >=0.1.0, <2.3.2 · fixed in 0.0.0-20250807212521-c52795c1ef74, 2.3.2
GHSA-2q8q-8fgw-9p6p · CVE-2025-55001 - CVSS 6.5 Medium
OpenBao TOTP Secrets Engine Code Reuse
- CWE-156
<0.0.0-20250806193153-183891f8d535 || >=0.1.0, <2.3.2 · fixed in 0.0.0-20250806193153-183891f8d535, 2.3.2
GHSA-f7c3-mhj2-9pvg · CVE-2025-55000 - CVSS 6.5 Medium
HashiCorp Vault ldap auth method may not have correctly enforced MFA
- CWE-156
<1.20.2 · fixed in 1.20.2
GHSA-7rx2-769v-hrwf · CVE-2025-6013 - CVSS 6.5 Medium
Hashicorp Vault's TOTP Secrets Engine Susceptible to Code Reuse
- CWE-156
<1.20.1 · fixed in 1.20.1
GHSA-qv3p-fmv3-9hww · CVE-2025-6014