CVE-2023-24999CWE-863

Vault Fails to Verify if the AppRole SecretID Belongs to Role During a Destroy Operation

Medium · published March 10, 2023

CVSS v3.1
4.4
EPSS
1%
Percentile
47.8
In the wild
Unconfirmed
What it is

HashiCorp Vault and Vault Enterprise’s approle auth method allowed any authenticated user with access to an approle destroy endpoint to destroy the secret ID of any other role by providing the secret ID accessor. This vulnerability is fixed in Vault 1.13.0, 1.12.4, 1.11.8, 1.10.11 and above.

The record
Technical detail
CVSS v3.1
4.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00597 · 47.8th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2023-03-10T23:12Z
EPSS history
Timeline
  • 10 MAR 23:12Z
    Vault Fails to Verify if the AppRole SecretID Belongs to Role During a Destroy Operation
    cvelistv5