Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2023-0665
HistoryMar 30, 2023 - 1:15 a.m.

CVE-2023-0665

2023-03-3001:15:07
CWE-285
[email protected]
web.nvd.nist.gov
9
hashicorp vault
pki mount
access issue
fixed
versions 1.13.1
1.12.5
1.11.9

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

37.4%

JSON

HashiCorp Vault’s PKI mount issuer endpoints did not correctly authorize access to remove an issuer or modify issuer metadata, potentially resulting in denial of service of the PKI mount. This bug did not affect public or private key material, trust chains or certificate issuance. Fixed in Vault 1.13.1, 1.12.5, and 1.11.9.

Affected configurations

Nvd
Node
hashicorpvaultRange<1.11.9-
OR
hashicorpvaultRange<1.11.9enterprise
OR
hashicorpvaultRange1.12.0–1.12.5-
OR
hashicorpvaultRange1.12.0–1.12.5enterprise
OR
hashicorpvaultRange1.13.0–1.13.1-
OR
hashicorpvaultRange1.13.0–1.13.1enterprise
VendorProductVersionCPE
hashicorpvault*cpe:2.3:a:hashicorp:vault:*:*:*:*:-:*:*:*
hashicorpvault*cpe:2.3:a:hashicorp:vault:*:*:*:*:enterprise:*:*:*

Related

prion 1
cgr 1
osv 9
redhatcve 1
wolfi 1
github 1
veracode 1
cve 1
cvelist 1
ibm 1
redhat 3
prion
prion
Denial of service
2023-03-30 01:15:00
cgr
cgr
CVE-2023-0665 vulnerabilities
2024-05-19 03:07:16
osv
osv
HashiCorp Vault's PKI mount vulnerable to denial of service
2023-03-30 03:30:38
HashiCorp Vault's PKI mount vulnerable to denial of service in github.com/hashicorp/vault
2024-08-20 20:29:19
CVE-2023-0665
2023-03-30 01:15:07
redhatcve
redhatcve
CVE-2023-0665
2023-03-30 10:13:42
wolfi
wolfi
CVE-2023-0665 vulnerabilities
2024-09-30 09:32:54
github
github
HashiCorp Vault's PKI mount vulnerable to denial of service
2023-03-30 03:30:38
veracode
veracode
Improper Authorization
2023-04-06 12:35:59
cve
cve
CVE-2023-0665
2023-03-30 01:15:07
cvelist
cvelist
CVE-2023-0665 Vault PKI Issuer Endpoint Did Not Correctly Authorize Access to Issuer Metadata
2023-03-30 00:21:47
ibm
ibm
Security Bulletin: IBM Cloud Pak for Network Automation 2.4.7 fixes multiple security vulnerabilities
2023-06-20 08:47:47
redhat
redhat
(RHSA-2023:5006) Important: OpenShift Container Platform 4.14.0 bug fix and security update
2023-10-31 12:52:06
(RHSA-2023:1326) Important: OpenShift Container Platform 4.13.0 security update
2023-05-17 22:28:04
(RHSA-2023:3742) Important: Red Hat OpenShift Data Foundation 4.13.0 security and bug fix update
2023-06-21 15:20:50

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

37.4%

JSON
Related for NVD:CVE-2023-0665
prion1cgr1osv9redhatcve1wolfi1github1veracode1cve1cvelist1ibm1redhat3