Advisoriesby IbisVaultGHSA-4mp7-2m29-gqxf
HashiCorp Vault Authentication bypass
Fix: upgrade to 1.2.5 or later (4 fixed versions below)
HashiCorp Vault and Vault Enterprise versions 0.8.3 and newer, when configured with the GCP GCE auth method, may be vulnerable to authentication bypass. Fixed in 1.2.5, 1.3.8, 1.4.4, and 1.5.1.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| github.com/hashicorp/vault Go | >= 0.8.3, < 1.2.5 | 1.2.5 |
| >= 1.3.0, < 1.3.8 | 1.3.8 | |
| >= 1.4.0, < 1.4.4 | 1.4.4 | |
| >= 1.5.0, < 1.5.1 | 1.5.1 |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-287
- Also known as
- BIT-vault-2020-16251, CVE-2020-16251, GO-2024-2488
More Vault advisories
All Vault
Incorrect TLS certificate auth method in VaultCVE-2024-2048fixed in 1.14.10 +1Hashicorp Vault may expose sensitive log informationCVE-2024-0831fixed in 1.15.5Improper Authentication in HashiCorp VaultCVE-2021-3282fixed in 1.6.2Enumeration of users in HashiCorp VaultCVE-2020-35177fixed in 1.5.6 +1HashiCorp Vault Improper Privilege ManagementCVE-2020-10660fixed in 1.3.4HashiCorp Vault Improper Privilege ManagementCVE-2020-10661fixed in 1.3.4