{"id":"EUVD-2025-35715","enisaUuid":"f111b467-ec01-38b4-975a-b4bcc96da9b7","description":"Vault and Vault Enterprise’s (“Vault”) AWS Auth method may be susceptible to authentication bypass if the role of the configured bound_principal_iam is the same across AWS accounts, or uses a wildcard. This vulnerability, CVE-2025-11621, is fixed in Vault Community Edition 1.21.0 and Vault Enterprise 1.21.0, 1.20.5, 1.19.11, and 1.16.27","datePublished":"Oct 23, 2025, 7:08:54 PM","dateUpdated":"Feb 26, 2026, 4:57:11 PM","baseScore":8.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","references":"https://discuss.hashicorp.com/t/hcsec-2025-30-vault-aws-auth-method-authentication-bypass-through-mishandling-of-cache-entries/76709\n","aliases":"CVE-2025-11621\nGHSA-9g4h-h484-3578\n","assigner":"HashiCorp","epss":0.49,"enisaIdProduct":[{"id":"496cc0c8-31c1-31de-9320-76e363552c6b","product":{"name":"Vault Enterprise","vendor":{"name":"Hashicorp"}},"product_version":"0.6.0 \u003c1.21.0"},{"id":"58aba696-298c-3ae2-af6a-60373947df67","product":{"name":"Vault","vendor":{"name":"Hashicorp"}},"product_version":"0.6.0 \u003c1.21.0"}],"enisaIdVendor":[{"id":"b884fed2-2ff0-364b-8fc0-a7df29048772","vendor":{"name":"Hashicorp"}}],"enisaIdVulnerability":[{"id":"c3f8129f-e10b-3be0-b71f-aa210a31e147","vulnerability":{"id":"CVE-2025-11621","description":"Vault and Vault Enterprise’s (“Vault”) AWS Auth method may be susceptible to authentication bypass if the role of the configured bound_principal_iam is the same across AWS accounts, or uses a wildcard. This vulnerability, CVE-2025-11621, is fixed in Vault Community Edition 1.21.0 and Vault Enterprise 1.21.0, 1.20.5, 1.19.11, and 1.16.27","datePublished":"Oct 23, 2025, 7:08:54 PM","dateUpdated":"Feb 26, 2026, 4:57:11 PM","status":"PUBLISHED","baseScore":8.1,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","references":"https://discuss.hashicorp.com/t/hcsec-2025-30-vault-aws-auth-method-authentication-bypass-through-mishandling-of-cache-entries/76709\n","enisa_id":"EUVD-2025-35715\n","assigner":"HashiCorp","epss":0.49,"dataProcessed":"Nov 2, 2026, 7:16:59 AM","vulnerabilityProduct":[{"id":"015a0e61-9c64-3e8e-9318-6ba5eb1c2344","product":{"name":"Vault Enterprise","vendor":{"name":"Hashicorp"}},"product_version":"0.6.0 \u003c1.21.0"},{"id":"e3d46729-d56b-3c30-baa8-09889a572516","product":{"name":"Vault","vendor":{"name":"Hashicorp"}},"product_version":"0.6.0 \u003c1.21.0"}],"vulnerabilityVendor":[{"id":"d41dccc2-9ab5-3a98-83b6-79a36f98e570","vendor":{"name":"Hashicorp"}}]}},{"id":"ea0821de-3948-35b8-8f14-8d410ad88abc","vulnerability":{"id":"GHSA-9g4h-h484-3578","description":"HashiCorp Vault and Vault Enterprise\u0027s AWS Auth method may be susceptible to authentication bypass","datePublished":"Oct 23, 2025, 9:31:43 PM","dateUpdated":"Oct 23, 2025, 10:24:03 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2025-11621\nhttps://github.com/hashicorp/vault/commit/8d07273d14ae7f5a48cc96f66cc86615dea83390\nhttps://discuss.hashicorp.com/t/hcsec-2025-30-vault-aws-auth-method-authentication-bypass-through-mishandling-of-cache-entries/76709\nhttps://github.com/hashicorp/vault\n","enisa_id":"EUVD-2025-35715\n","aliases":"GHSA-9g4h-h484-3578\nCVE-2025-11621\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 1:55:38 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"0fcd0586-1ab3-35fc-b9bb-c7a3cafe2453","advisory":{"id":"WID-SEC-W-2025-2396","description":"Hashicorp Vault: Mehrere Schwachstellen","summary":"Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in Hashicorp Vault ausnutzen, um Sicherheitsvorkehrungen zu umgehen oder einen Denial-of-Service-Zustand zu erzeugen.","datePublished":"Oct 23, 2025, 10:00:00 PM","dateUpdated":"Nov 24, 2025, 11:00:00 PM","baseScore":0.0,"references":"https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-2396.json\nhttps://wid.cert-bund.de/portal/wid/securityadvisory?name\u003dWID-SEC-2025-2396\n","aliases":"CVE-2025-11621\nCVE-2025-12044\n","source":{"id":8,"name":"csaf_certbund"},"advisoryProduct":[{"id":"05c11b86-9199-335c-aa1b-30252aad729e","product":{"name":"Enterprise 1.20.5","vendor":{"name":"Hashicorp"}}},{"id":"546f3373-994c-3493-b12b-e51408ca6f67","product":{"name":"Red Hat Enterprise Linux","vendor":{"name":"Red Hat"}}},{"id":"5c0ecf7b-e00f-3303-b022-23bcb4323644","product":{"name":"Enterprise 1.16.27","vendor":{"name":"Hashicorp"}}},{"id":"5c88d910-6a16-3d87-8a87-0f066376c667","product":{"name":"Vault","vendor":{"name":"Hashicorp"}}},{"id":"70cdaf87-f6be-3701-8abe-faa95a6b01a0","product":{"name":"Enterprise 1.21.0","vendor":{"name":"Hashicorp"}}},{"id":"b12adcf9-4fbe-3d83-a913-dd060d89cf94","product":{"name":"Community Edition 1.21.0","vendor":{"name":"Hashicorp"}}},{"id":"cdaa76bc-3cc5-3fcb-b81b-33dd8b817e9d","product":{"name":"Enterprise 1.19.11","vendor":{"name":"Hashicorp"}}}]}},{"id":"37c96b9c-bce3-3281-a1eb-b7f58c570342","advisory":{"id":"openSUSE-SU-2025:15710-1","description":"govulncheck-vulndb-0.0.20251105T184115-1.1 on GA media","summary":"govulncheck-vulndb-0.0.20251105T184115-1.1 on GA media","datePublished":"Nov 7, 2025, 12:00:00 AM","dateUpdated":"Sep 20, 2026, 9:44:36 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_15710-1.json\nhttps://www.suse.com/security/cve/CVE-2016-11063/\nhttps://www.suse.com/security/cve/CVE-2016-11066/\nhttps://www.suse.com/security/cve/CVE-2016-11067/\nhttps://www.suse.com/security/cve/CVE-2016-11068/\nhttps://www.suse.com/security/cve/CVE-2016-11069/\nhttps://www.suse.com/security/cve/CVE-2016-11070/\nhttps://www.suse.com/security/cve/CVE-2016-11071/\nhttps://www.suse.com/security/cve/CVE-2016-11072/\nhttps://www.suse.com/security/cve/CVE-2016-11073/\nhttps://www.suse.com/security/cve/CVE-2016-11074/\nhttps://www.suse.com/security/cve/CVE-2016-11075/\nhttps://www.suse.com/security/cve/CVE-2016-11076/\nhttps://www.suse.com/security/cve/CVE-2016-11077/\nhttps://www.suse.com/security/cve/CVE-2016-11078/\nhttps://www.suse.com/security/cve/CVE-2016-11079/\nhttps://www.suse.com/security/cve/CVE-2016-11080/\nhttps://www.suse.com/security/cve/CVE-2016-11081/\nhttps://www.suse.com/security/cve/CVE-2016-11082/\nhttps://www.suse.com/security/cve/CVE-2016-11083/\nhttps://www.suse.com/security/cve/CVE-2016-11084/\nhttps://www.suse.com/security/cve/CVE-2017-18872/\nhttps://www.suse.com/security/cve/CVE-2023-32199/\nhttps://www.suse.com/security/cve/CVE-2024-58269/\nhttps://www.suse.com/security/cve/CVE-2025-10545/\nhttps://www.suse.com/security/cve/CVE-2025-10678/\nhttps://www.suse.com/security/cve/CVE-2025-10954/\nhttps://www.suse.com/security/cve/CVE-2025-11374/\nhttps://www.suse.com/security/cve/CVE-2025-11375/\nhttps://www.suse.com/security/cve/CVE-2025-11579/\nhttps://www.suse.com/security/cve/CVE-2025-11621/\nhttps://www.suse.com/security/cve/CVE-2025-12044/\nhttps://www.suse.com/security/cve/CVE-2025-26625/\nhttps://www.suse.com/security/cve/CVE-2025-27093/\nhttps://www.suse.com/security/cve/CVE-2025-41410/\nhttps://www.suse.com/security/cve/CVE-2025-41443/\nhttps://www.suse.com/security/cve/CVE-2025-54286/\nhttps://www.suse.com/security/cve/CVE-2025-54287/\nhttps://www.suse.com/security/cve/CVE-2025-54288/\nhttps://www.suse.com/security/cve/CVE-2025-54289/\nhttps://www.suse.com/security/cve/CVE-2025-54290/\nhttps://www.suse.com/security/cve/CVE-2025-54291/\nhttps://www.suse.com/security/cve/CVE-2025-54293/\nhttps://www.suse.com/security/cve/CVE-2025-54469/\nhttps://www.suse.com/security/cve/CVE-2025-54470/\nhttps://www.suse.com/security/cve/CVE-2025-54471/\nhttps://www.suse.com/security/cve/CVE-2025-54499/\nhttps://www.suse.com/security/cve/CVE-2025-58073/\nhttps://www.suse.com/security/cve/CVE-2025-58075/\nhttps://www.suse.com/security/cve/CVE-2025-58356/\nhttps://www.suse.com/security/cve/CVE-2025-59043/\nhttps://www.suse.com/security/cve/CVE-2025-59048/\nhttps://www.suse.com/security/cve/CVE-2025-59530/\nhttps://www.suse.com/security/cve/CVE-2025-59836/\nhttps://www.suse.com/security/cve/CVE-2025-59937/\nhttps://www.suse.com/security/cve/CVE-2025-61141/\nhttps://www.suse.com/security/cve/CVE-2025-61524/\nhttps://www.suse.com/security/cve/CVE-2025-61581/\nhttps://www.suse.com/security/cve/CVE-2025-61688/\nhttps://www.suse.com/security/cve/CVE-2025-62156/\nhttps://www.suse.com/security/cve/CVE-2025-62157/\nhttps://www.suse.com/security/cve/CVE-2025-62375/\nhttps://www.suse.com/security/cve/CVE-2025-62506/\nhttps://www.suse.com/security/cve/CVE-2025-62513/\nhttps://www.suse.com/security/cve/CVE-2025-62705/\nhttps://www.suse.com/security/cve/CVE-2025-62714/\nhttps://www.suse.com/security/cve/CVE-2025-62725/\nhttps://www.suse.com/security/cve/CVE-2025-62820/\nhttps://www.suse.com/security/cve/CVE-2025-64101/\nhttps://www.suse.com/security/cve/CVE-2025-64102/\nhttps://www.suse.com/security/cve/CVE-2025-64103/\n","aliases":"CVE-2016-11063\nCVE-2016-11066\nCVE-2016-11067\nCVE-2016-11068\nCVE-2016-11069\nCVE-2016-11070\nCVE-2016-11071\nCVE-2016-11072\nCVE-2016-11073\nCVE-2016-11074\nCVE-2016-11075\nCVE-2016-11076\nCVE-2016-11077\nCVE-2016-11078\nCVE-2016-11079\nCVE-2016-11080\nCVE-2016-11081\nCVE-2016-11082\nCVE-2016-11083\nCVE-2016-11084\nCVE-2017-18872\nCVE-2023-32199\nCVE-2024-58269\nCVE-2025-10545\nCVE-2025-10678\nCVE-2025-10954\nCVE-2025-11374\nCVE-2025-11375\nCVE-2025-11579\nCVE-2025-11621\nCVE-2025-12044\nCVE-2025-26625\nCVE-2025-27093\nCVE-2025-41410\nCVE-2025-41443\nCVE-2025-54286\nCVE-2025-54287\nCVE-2025-54288\nCVE-2025-54289\nCVE-2025-54290\nCVE-2025-54291\nCVE-2025-54293\nCVE-2025-54469\nCVE-2025-54470\nCVE-2025-54471\nCVE-2025-54499\nCVE-2025-58073\nCVE-2025-58075\nCVE-2025-58356\nCVE-2025-59043\nCVE-2025-59048\nCVE-2025-59530\nCVE-2025-59836\nCVE-2025-59937\nCVE-2025-61141\nCVE-2025-61524\nCVE-2025-61581\nCVE-2025-61688\nCVE-2025-62156\nCVE-2025-62157\nCVE-2025-62375\nCVE-2025-62506\nCVE-2025-62513\nCVE-2025-62705\nCVE-2025-62714\nCVE-2025-62725\nCVE-2025-62820\nCVE-2025-64101\nCVE-2025-64102\nCVE-2025-64103\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"1a23be4f-881a-3b69-af30-f47e7bd822db","product":{"name":"govulncheck-vulndb-0:0.0.20251105T184115-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"2ed33f7b-f8d3-3670-bc12-20339a40cad4","product":{"name":"govulncheck-vulndb-0.0.20251105T184115-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"3ff168c0-43f0-3e6a-a46b-90f0b9322304","product":{"name":"govulncheck-vulndb-0:0.0.20251105T184115-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"6b082ef7-48e6-329d-a108-2122d2ee3fe7","product":{"name":"govulncheck-vulndb-0:0.0.20251105T184115-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"6df9e33c-98f3-3e85-bd98-4153a1025f74","product":{"name":"govulncheck-vulndb-0.0.20251105T184115-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"70fcae35-efbf-33bd-b653-2c72a0a85d73","product":{"name":"govulncheck-vulndb-0:0.0.20251105T184115-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"73a13c93-e86b-3658-97c0-52e119937024","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"dc8dabed-45c9-3497-b3f5-b41e45657724","product":{"name":"govulncheck-vulndb-0.0.20251105T184115-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"eb1e91f2-e5cf-3808-8f1f-c394962ed62d","product":{"name":"govulncheck-vulndb-0.0.20251105T184115-1.1.x86_64","vendor":{"name":"SUSE"}}}]}},{"id":"3d2a16e1-de24-3ff2-b8c8-c743bd1aae93","advisory":{"id":"RHSA-2025:21988","description":"Red Hat Security Advisory: RHTAS 1.3.1 - Red Hat Trusted Artifact Signer Release","summary":"The 1.3.1 release of Red Hat Trusted Artifact Signer OpenShift Operator.\nFor more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3","datePublished":"Nov 24, 2025, 5:31:18 PM","dateUpdated":"Sep 6, 2026, 4:22:30 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2025:21988\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_21988.json\n","aliases":"CVE-2025-11621\nCVE-2025-12044\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"7a02c775-504c-3fe9-ba54-7a4252ecd011","product":{"name":"Red Hat Trusted Artifact Signer 1.3","vendor":{"name":"Red Hat"}}},{"id":"85d65472-73f9-3647-a7d7-b7456b89abec","product":{"name":"registry.redhat.io/rhtas/gitsign-rhel9@sha256:882d508ec7d71fb3e13ee240ee295ee91884700d63029bb58bd456b6d23fd5e0_amd64","vendor":{"name":"Red Hat"}}},{"id":"9043f57d-bf7f-39dc-a256-1a4e52f01e66","product":{"name":"registry.redhat.io/rhtas/cosign-rhel9@sha256:a6f3dba2c7ec8cdf7a87a2e8679da66c2248b44c7e15611205f096a6c1629f88_amd64","vendor":{"name":"Red Hat"}}},{"id":"a13792ca-3273-38f9-8d86-c3700b323d27","product":{"name":"registry.redhat.io/rhtas/client-server-rhel9@sha256:cddda466bc9957f1c3902da3a0cf37ef3ec08f4aeb8c50a421405540120b75cf_amd64","vendor":{"name":"Red Hat"}}}]}},{"id":"44332e4c-3ce4-3a82-8551-bf5a3a6bd0d9","advisory":{"id":"RHSA-2026:3827","description":"Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.20.3","summary":"The 1.20.3 GA release of Red Hat OpenShift Pipelines Operator..\nFor more details see [product documentation](https://docs.redhat.com/en/documentation/red_hat_openshift_pipelines).","datePublished":"Mar 5, 2026, 7:31:32 AM","dateUpdated":"Oct 31, 2026, 11:25:45 PM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:3827\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3827.json\n","aliases":"CVE-2025-11621\nCVE-2025-12044\nCVE-2025-47913\nCVE-2025-61729\nCVE-2025-66506\nCVE-2025-66564\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"039b9e87-2607-3950-a6e2-9a8f0cdec0df","product":{"name":"registry.redhat.io/openshift-pipelines/pipelines-opc-rhel9@sha256:cd4d671c485fe1ffc4fb45734890cb258fddc1658b7e161bee72e1787fd861e6_arm64","vendor":{"name":"Red Hat"}}},{"id":"247ab72d-b105-3142-af19-901c941fea8a","product":{"name":"registry.redhat.io/openshift-pipelines/pipelines-opc-rhel9@sha256:67e5fd28f10c59bfb6be12fcd3702561b8dc4e6c237a77a38839370d59749154_s390x","vendor":{"name":"Red Hat"}}},{"id":"25d10979-9f2f-3857-b79b-a1cf3ff63c1c","product":{"name":"registry.redhat.io/openshift-pipelines/pipelines-cli-tkn-rhel9@sha256:05d553e2c0d86956b32281aa6ae7ffa1948073f753889007f041eb2a72cbfa91_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"4d5c353e-111c-387e-8de8-bf6a10234aab","product":{"name":"registry.redhat.io/openshift-pipelines/pipelines-serve-tkn-cli-rhel9@sha256:d17123e7d12d05e7c56cb8cf8c70a0ea2f477b33e529b8db43e3df8b112d353a_ppc64le","vendor":{"name":"Red Hat"}}},{"id":"5f594507-c7b8-36b9-bb32-3c625fdeef43","product":{"name":"registry.redhat.io/openshift-pipelines/pipelines-serve-tkn-cli-rhel9@sha256:6c868d7ba256b73c66abfb5cbaea0a6d09107c9e90f0deea471d689d1d7bca95_s390x","vendor":{"name":"Red Hat"}}},{"id":"68923c84-c1c5-3207-9065-4e3689e0b4e4","product":{"name":"registry.redhat.io/openshift-pipelines/pipelines-cli-tkn-rhel9@sha256:9f4bdd415c1e06da1e37e872228e31f4b6ff4890aab7efca0b835ff92ec740cf_arm64","vendor":{"name":"Red Hat"}}},{"id":"6c295e42-c3c8-35cd-aebd-5fa4b8d9b446","product":{"name":"Red Hat OpenShift Pipelines 1.2","vendor":{"name":"Red Hat"}}},{"id":"78ff6a6b-bec9-321c-b601-fc78dd2501b1","product":{"name":"registry.redhat.io/openshift-pipelines/pipelines-cli-tkn-rhel9@sha256:1953e97a47dc441f2cd7a2f450aeb5c1792d180539c4756673d0f76679f29da9_amd64","vendor":{"name":"Red Hat"}}},{"id":"9c03e64c-3443-3a01-8243-a41a46bf932a","product":{"name":"Red Hat OpenShift Pipelines 1.20","vendor":{"name":"Red Hat"}}},{"id":"b8ecc69d-1e91-3787-97be-bcd3195f2f8e","product":{"name":"registry.redhat.io/openshift-pipelines/pipelines-serve-tkn-cli-rhel9@sha256:838a518d67dabba6dc212c88c69d8897422f35a5047e82c10fe3830869d98041_arm64","vendor":{"name":"Red Hat"}}},{"id":"c6bf8c5d-69ed-3960-adb8-274c4a52da33","product":{"name":"registry.redhat.io/openshift-pipelines/pipelines-opc-rhel9@sha256:1f07ea20761776124173a9aab05b072b7ff1de84844a1e9b58cdcbf343ab99e6_amd64","vendor":{"name":"Red Hat"}}},{"id":"d5c92046-a345-3565-ac35-d123f3581f92","product":{"name":"registry.redhat.io/openshift-pipelines/pipelines-serve-tkn-cli-rhel9@sha256:a5ce1906f4466a88cc0228ab798462120b938622f5ddd89e6826ae3bff968e5b_amd64","vendor":{"name":"Red Hat"}}},{"id":"ef1eb845-3166-349c-a480-a83fcd9969bf","product":{"name":"registry.redhat.io/openshift-pipelines/pipelines-cli-tkn-rhel9@sha256:66be750a2e2abe15579892d3f8d77058d79f165bd60b867a5d37716a277a6b59_s390x","vendor":{"name":"Red Hat"}}},{"id":"f4b64a56-8831-37ef-8dc6-264a22026123","product":{"name":"registry.redhat.io/openshift-pipelines/pipelines-opc-rhel9@sha256:a088a44bb4d11ecf877dc035f351a3500353ec3c8c6a6955d5eb1d6908bf40e3_ppc64le","vendor":{"name":"Red Hat"}}}]}},{"id":"522f1b3c-75ea-3486-bcb4-8cf7ef6b5329","advisory":{"id":"RHSA-2025:21981","description":"Red Hat Security Advisory: RHTAS 1.3.1 - Red Hat Trusted Artifact Signer Release","summary":"The 1.3.1 release of Red Hat Trusted Artifact Signer OpenShift Operator.\nFor more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3","datePublished":"Nov 24, 2025, 4:47:41 PM","dateUpdated":"Sep 6, 2026, 4:22:39 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2025:21981\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_21981.json\n","aliases":"CVE-2025-11621\nCVE-2025-12044\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"7ddb3e61-9b40-394d-b1bd-a4c3cf3291bd","product":{"name":"registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:57f1db8dd5e9cb42078a20c065c1f3052175a88d77b656f4c8e903ab40088303_amd64","vendor":{"name":"Red Hat"}}},{"id":"813c087b-11fb-3044-9c9a-57e39d7d4a96","product":{"name":"registry.redhat.io/rhtas/rekor-server-rhel9@sha256:799b0b86f83f0fdf450ecbd2726419570b15f6ec5ba5b814750d45b8269e4dac_amd64","vendor":{"name":"Red Hat"}}},{"id":"bdfb7d3b-8be0-3cf4-90ce-d8338fb3f3d3","product":{"name":"registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:3782ef36eac0a40b3b8d018476d0af7505d2a81f0ccb993644e8c5f20f1cd566_amd64","vendor":{"name":"Red Hat"}}},{"id":"eebbc403-4fb0-3b0b-92af-ce0ed28c0a42","product":{"name":"Red Hat Trusted Artifact Signer 1.3","vendor":{"name":"Red Hat"}}}]}},{"id":"b1221a1b-41da-3984-a362-e9a319d00403","advisory":{"id":"RHSA-2025:21984","description":"Red Hat Security Advisory: RHTAS 1.3.1 - Red Hat Trusted Artifact Signer Release","summary":"The 1.3.1 release of Red Hat Trusted Artifact Signer OpenShift Operator.\nFor more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3","datePublished":"Nov 24, 2025, 5:11:01 PM","dateUpdated":"Sep 6, 2026, 4:20:52 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2025:21984\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_21984.json\n","aliases":"CVE-2025-11621\nCVE-2025-12044\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"03e3927e-b088-3d67-809f-83b5a5083962","product":{"name":"Red Hat Trusted Artifact Signer 1.3","vendor":{"name":"Red Hat"}}},{"id":"5f569fd5-1c60-3241-853d-6efbcb0f82cc","product":{"name":"registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:7b3eb9108c50321278ccad2032b3fb365911df83084cca953dd068cdd51f7874_amd64","vendor":{"name":"Red Hat"}}}]}},{"id":"bdcb03d1-dc1d-39e2-ae2a-d9dd00833695","advisory":{"id":"RHSA-2025:21976","description":"Red Hat Security Advisory: RHTAS 1.3.1 - Red Hat Trusted Artifact Signer Release","summary":"The 1.3.1 release of Red Hat Trusted Artifact Signer OpenShift Operator.\nFor more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3","datePublished":"Nov 24, 2025, 4:14:59 PM","dateUpdated":"Sep 6, 2026, 4:22:33 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2025:21976\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_21976.json\n","aliases":"CVE-2025-11621\nCVE-2025-12044\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"476878a3-5ad7-3cf2-8c83-587a922049bb","product":{"name":"registry.redhat.io/rhtas/fulcio-rhel9@sha256:b19900ebbf9cac67196127a60ea2434a8ce2011b17bab15a0e7fc96cf38a63fa_amd64","vendor":{"name":"Red Hat"}}},{"id":"a2401502-36b7-3482-a47e-0038c64a0827","product":{"name":"Red Hat Trusted Artifact Signer 1.3","vendor":{"name":"Red Hat"}}}]}},{"id":"ff089eb3-a013-35d5-9916-82c2e7c5990b","advisory":{"id":"RHSA-2025:22058","description":"Red Hat Security Advisory: RHTAS 1.3.1 - Tech Preview Release Of the Policy Controller Operator","summary":"The Tech Preview release of the RHTAS Policy Controller Operator.\nFor more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3","datePublished":"Nov 25, 2025, 8:59:13 AM","dateUpdated":"Sep 6, 2026, 4:22:36 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2025:22058\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_22058.json\n","aliases":"CVE-2025-11621\nCVE-2025-12044\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"b2576015-f31c-36e0-bf0b-fbe6f11e3f5f","product":{"name":"registry.redhat.io/rhtas/policy-controller-rhel9@sha256:7172d6a08594cccd155c2f74110cfbafadb812af84bb6b75c8bec1e3c416bd26_amd64","vendor":{"name":"Red Hat"}}},{"id":"cf7e9216-d175-31c3-8ba0-f7587fee97dd","product":{"name":"Red Hat Trusted Artifact Signer 1.3","vendor":{"name":"Red Hat"}}}]}}]}