Advisoriesby IbisVaultGHSA-hwc3-3qh6-r4gg
HashiCorp Vault's PKI mount vulnerable to denial of service
Fix: upgrade to 1.11.9 or later (3 fixed versions below)
HashiCorp Vault's PKI mount issuer endpoints did not correctly authorize access to remove an issuer or modify issuer metadata, potentially resulting in denial of service of the PKI mount. This bug did not affect public or private key material, trust chains or certificate issuance. Fixed in Vault 1.13.1, 1.12.5, and 1.11.9.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| github.com/hashicorp/vault Go | < 1.11.9 | 1.11.9 |
| >= 1.12.0, < 1.12.5 | 1.12.5 | |
| >= 1.13.0, < 1.13.1 | 1.13.1 |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-285
- Also known as
- BIT-vault-2023-0665, CVE-2023-0665, GO-2023-1708
More Vault advisories
All Vault
HashiCorp Vault and Vault Enterprise vulnerable to user enumerationCVE-2023-3462fixed in 1.13.5 +1Hashicorp Vault Fails to Verify if Approle SecretID Belongs to Role During a Destroy OperationCVE-2023-24999fixed in 1.10.11 +2HashiCorp Vault's revocation list not respectedCVE-2022-41316fixed in 1.9.10 +2Hashicorp Vault vulnerable to Cross-site ScriptingCVE-2023-2121fixed in 1.11.11 +2HashiCorp Vault’s Microsoft SQL Database Storage Backend Vulnerable to SQL Injection Via Configuration FileCVE-2023-0620fixed in 1.11.9 +2HashiCorp Vault's implementation of Shamir's secret sharing vulnerable to cache-timing attacksCVE-2023-25000fixed in 1.11.9 +2