x/vulndb: potential Go vuln in github.com/hashicorp/vault: GHSA-fp52-qw33-mfmw

[GoVulnBot]

In GitHub Security Advisory GHSA-fp52-qw33-mfmw, there is a vulnerability in the following Go packages or modules:

Unit	Fixed	Vulnerable Ranges
github.com/hashicorp/vault	1.4.4	>= 1.4.0, < 1.4.4

Cross references:

• CVE-2020-16250 appears in issue x/vulndb: potential Go vuln in github.com/hashicorp/vault: GHSA-fp52-qw33-mfmw #825 NOT_IMPORTABLE
• GHSA-fp52-qw33-mfmw appears in issue x/vulndb: potential Go vuln in github.com/hashicorp/vault: GHSA-fp52-qw33-mfmw #825 NOT_IMPORTABLE

See doc/triage.md for instructions on how to triage this report.

modules:
  - module: TODO
    versions:
      - introduced: 1.4.0
        fixed: 1.4.4
    packages:
      - package: github.com/hashicorp/vault
  - module: TODO
    versions:
      - introduced: 1.3.0
        fixed: 1.3.8
    packages:
      - package: github.com/hashicorp/vault
  - module: TODO
    versions:
      - introduced: 0.8.1
        fixed: 1.2.5
    packages:
      - package: github.com/hashicorp/vault
  - module: TODO
    versions:
      - introduced: 1.5.0
        fixed: 1.5.1
    packages:
      - package: github.com/hashicorp/vault
description: HashiCorp Vault and Vault Enterprise versions 0.7.1 and newer, when configured
    with the AWS IAM auth method, may be vulnerable to authentication bypass. Fixed
    in 1.2.5, 1.3.8, 1.4.4, and 1.5.1..
cves:
  - CVE-2020-16250
ghsas:
  - GHSA-fp52-qw33-mfmw

[tatianab]

Duplicate of #825