CVE-2023-2197CWE-326

Vault Enterprise Vulnerable to Padding Oracle Attacks When Using a CBC-based Encryption Mechanism with a HSM

Low · published May 1, 2023

CVSS v3.1
2.5
EPSS
0%
Percentile
0.3
In the wild
Unconfirmed
What it is

HashiCorp Vault Enterprise 1.13.0 up to 1.13.1 is vulnerable to a padding oracle attack when using an HSM in conjunction with the CKM_AES_CBC_PAD or CKM_AES_CBC encryption mechanisms. An attacker with privileges to modify storage and restart Vault may be able to intercept or modify cipher text in order to derive Vault’s root key. Fixed in 1.13.2

The record
Technical detail
CVSS v3.1
2.5 · LOW
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00086 · 0.3th percentile
Weakness
CWE-326 · Inadequate Encryption Strength
Published
2023-05-01T19:41Z
EPSS history
Timeline
  • 01 MAY 19:41Z
    Vault Enterprise Vulnerable to Padding Oracle Attacks When Using a CBC-based Encryption Mechanism with a HSM
    cvelistv5