Advisoriesby IbisVaultGHSA-r3w7-mfpm-c2vw
Incorrect TLS certificate auth method in Vault
Fix: upgrade to 1.14.10 or later (2 fixed versions below)
Vault and Vault Enterprise (“Vault”) TLS certificate auth method did not correctly validate client certificates when configured with a non-CA certificate as trusted certificate. In this configuration, an attacker may be able to craft a malicious certificate that could be used to bypass authentication. Fixed in Vault 1.15.5 and 1.14.10.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| github.com/hashicorp/vault Go | >= 1.15.0, < 1.15.5 | 1.15.5 |
| < 1.14.10 | 1.14.10 |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-295
- Also known as
- BIT-vault-2024-2048, CVE-2024-2048, GO-2024-2617
More Vault advisories
All Vault
HashiCorpVault does not correctly validate OCSP responsesCVE-2024-2660fixed in 1.16.0Hashicorp Vault may expose sensitive log informationCVE-2024-0831fixed in 1.15.5Improper Authentication in HashiCorp VaultCVE-2021-3282fixed in 1.6.2Enumeration of users in HashiCorp VaultCVE-2020-35177fixed in 1.5.6 +1HashiCorp Vault Authentication bypassCVE-2020-16251fixed in 1.2.5 +3HashiCorp Vault Improper Privilege ManagementCVE-2020-10660fixed in 1.3.4