CVE-2023-25000 Vault Vulnerable to Cache-Timing Attacks During Seal and Unseal Operations

🗓️ 30 Mar 2023 00:17:46Reported by GoogleType

osv

osv🔗 osv.dev👁 25 Views

Vulnerability in HashiCorp Vault's Shamir's secret sharing

Reporter	Title	Published	Views	Family All 29
IBM Security Bulletins	Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to an Observable Timing Discrepancy in Vault (CVE-2023-25000)	4 Apr 202521:24	–	ibm
BDU FSTEC	The vulnerability of the Shamir’s secret platform implementation for archiving corporate information, HashiCorp Vault and Vault Enterprise, allows a intruder to gain unauthorized access to protected information.	29 May 202500:00	–	bdu_fstec
Chainguard	CVE-2023-25000 vulnerabilities	30 Mar 202301:15	–	cgr
CNNVD	HashiCorp Vault 安全漏洞	30 Mar 202300:00	–	cnnvd
CVE	CVE-2023-25000	30 Mar 202300:17	–	cve
Cvelist	CVE-2023-25000 Vault Vulnerable to Cache-Timing Attacks During Seal and Unseal Operations	30 Mar 202300:17	–	cvelist
EUVD	EUVD-2023-1119	3 Oct 202520:07	–	euvd
Github Security Blog	HashiCorp Vault's implementation of Shamir's secret sharing vulnerable to cache-timing attacks	30 Mar 202303:30	–	github
HashiCorp Security Advisories	Vault Vulnerable to Cache-Timing Attacks During Seal and Unseal Operations	30 Mar 202300:02	–	hashicorp
NVD	CVE-2023-25000	30 Mar 202301:15	–	nvd

Source	Link
discuss	www.discuss.hashicorp.com/t/hcsec-2023-10-vault-vulnerable-to-cache-timing-attacks-during-seal-and-unseal-operations/52078
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2023/25xxx/CVE-2023-25000.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-25000
security	www.security.netapp.com/advisory/ntap-20230526-0008/
github	www.github.com/hashicorp/vault

15 Jul 2026 01:49Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.15

EPSS0.0021

cve-2023-25000 hashicorp vault shamir's secret sharing precomputed table lookups cache-timing attacks unseal operations side channel brute force software security vulnerability