CVE-2023-0620CWE-89

Vault Vulnerable to SQL Injection When Configuring the Microsoft SQL Database Storage Backend

Medium · published March 30, 2023

CVSS v3.1
6.5
EPSS
0%
Percentile
30.6
In the wild
Unconfirmed
What it is

HashiCorp Vault and Vault Enterprise versions 0.8.0 through 1.13.1 are vulnerable to an SQL injection attack when configuring the Microsoft SQL (MSSQL) Database Storage Backend. When configuring the MSSQL plugin through the local, certain parameters are not sanitized when passed to the user-provided MSSQL database. An attacker may modify these parameters to execute a malicious SQL command.

This issue is fixed in versions 1.13.1, 1.12.5, and 1.11.9.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00378 · 30.6th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2023-03-30T00:28Z
EPSS history
Timeline
  • 30 MAR 00:28Z
    Vault Vulnerable to SQL Injection When Configuring the Microsoft SQL Database Storage Backend
    cvelistv5