BIT-VAULT-2023-25000 Vault Vulnerable to Cache-Timing Attacks During Seal and Unseal Operations

🗓️ 06 Mar 2024 11:09:06Reported by GoogleType

osv

osv🔗 osv.dev👁 19 Views

Vulnerability in HashiCorp Vault 1.13.1, 1.12.5, and 1.11.9

Reporter	Title	Published	Views	Family All 29
IBM Security Bulletins	Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to an Observable Timing Discrepancy in Vault (CVE-2023-25000)	4 Apr 202521:24	–	ibm
BDU FSTEC	The vulnerability of the Shamir’s secret platform implementation for archiving corporate information, HashiCorp Vault and Vault Enterprise, allows a intruder to gain unauthorized access to protected information.	29 May 202500:00	–	bdu_fstec
Chainguard	CVE-2023-25000 vulnerabilities	30 Mar 202301:15	–	cgr
CNNVD	HashiCorp Vault 安全漏洞	30 Mar 202300:00	–	cnnvd
CVE	CVE-2023-25000	30 Mar 202300:17	–	cve
Cvelist	CVE-2023-25000 Vault Vulnerable to Cache-Timing Attacks During Seal and Unseal Operations	30 Mar 202300:17	–	cvelist
EUVD	EUVD-2023-1119	3 Oct 202520:07	–	euvd
Github Security Blog	HashiCorp Vault's implementation of Shamir's secret sharing vulnerable to cache-timing attacks	30 Mar 202303:30	–	github
HashiCorp Security Advisories	Vault Vulnerable to Cache-Timing Attacks During Seal and Unseal Operations	30 Mar 202300:02	–	hashicorp
NVD	CVE-2023-25000	30 Mar 202301:15	–	nvd

Source	Link
discuss	www.discuss.hashicorp.com/t/hcsec-2023-10-vault-vulnerable-to-cache-timing-attacks-during-seal-and-unseal-operations/52078
security	www.security.netapp.com/advisory/ntap-20230526-0008/
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-25000

20 May 2025 10:02Current

4.8Medium risk

Vulners AI Score4.8

CVSS 3.14.7 - 5

EPSS0.0021

SSVC

hashicorp vault shamir's secret sharing cache-timing attacks side channel brute force software