CVE-2023-0665 Vault PKI Issuer Endpoint Did Not Correctly Authorize Access to Issuer Metadata

2023-03-3000:21:47

CWE-285

HashiCorp

www.cve.org

hashicorp vault

pki issuer

authorization bug

denial of service

fixed

version 1.13.1

version 1.12.5

version 1.11.9

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

EPSS

0.001

Percentile

37.4%

JSON

HashiCorp Vault’s PKI mount issuer endpoints did not correctly authorize access to remove an issuer or modify issuer metadata, potentially resulting in denial of service of the PKI mount. This bug did not affect public or private key material, trust chains or certificate issuance. Fixed in Vault 1.13.1, 1.12.5, and 1.11.9.

CNA Affected

[
  {
    "vendor": "HashiCorp",
    "product": "Vault",
    "platforms": [
      "Windows",
      "MacOS",
      "Linux",
      "x86",
      "ARM",
      "64 bit",
      "32 bit"
    ],
    "repo": "https://github.com/hashicorp/vault",
    "versions": [
      {
        "status": "affected",
        "version": "1.13.0",
        "lessThan": "1.13.1",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "1.12.0",
        "lessThan": "1.12.5",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "1.11.0",
        "lessThan": "1.11.9",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "HashiCorp",
    "product": "Vault Enterprise",
    "platforms": [
      "Windows",
      "MacOS",
      "Linux",
      "x86",
      "ARM",
      "64 bit",
      "32 bit"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "1.13.0",
        "lessThan": "1.13.1",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "1.12.0",
        "lessThan": "1.12.5",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "1.11.0",
        "lessThan": "1.11.9",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]