Lucene search
Alpine Linux Development TeamALPINE:CVE-2023-3775HistorySep 29, 2023 - 12:15 a.m.
CVE-2023-3775
2023-09-2900:15:12
Alpine Linux Development Team
security.alpinelinux.org
8
cve-2023-3775
vault enterprise
sentinel role governing policy
access restriction
non-descendant namespace
denial of service
mitigation
0.0004 Low
EPSS
Percentile
13.3%
A Vault Enterprise Sentinel Role Governing Policy created by an operator to restrict access to resources in one namespace can be applied to requests outside in another non-descendant namespace, potentially resulting in denial of service. Fixed in Vault Enterprise 1.15.0, 1.14.4, 1.13.8.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | 3.18-community | noarch | vault | = 1.13.5-r3 | UNKNOWN |
Related
prion
prion
Design/Logic Flaw
2023-09-29 00:15:00
redhatcve
redhatcve
CVE-2023-3775
2023-10-03 06:27:11
osv
osv
BIT-vault-2023-3775
2024-03-06 11:08:41
CVE-2023-3775
2023-09-29 00:15:12
nvd
nvd
CVE-2023-3775
2023-09-29 00:15:12
cve
cve
CVE-2023-3775
2023-09-29 00:15:12
cvelist
cvelist