GHSA-HWC3-3QH6-R4GG HashiCorp Vault's PKI mount vulnerable to denial of service

🗓️ 30 Mar 2023 03:30:38Reported by GoogleType

osv

osv🔗 osv.dev👁 23 Views

HashiCorp Vault PKI mount denial of service vulnerability

Reporter	Title	Published	Views	Family All 27
IBM Security Bulletins	Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to Improper and Incorrect Authorization and SQL Injection in Vault (CVE-2023-0665, CVE-2023-24999, CVE-2023-0620)	4 Apr 202521:24	–	ibm
BDU FSTEC	The vulnerability of the PKI mechanism in HashiCorp’s Vault and Vault Enterprise, a platform for archiving corporate information, allows a perpetrator to trigger a service failure.	29 May 202500:00	–	bdu_fstec
Chainguard	CVE-2023-0665 vulnerabilities	30 Mar 202301:15	–	cgr
CNNVD	HashiCorp Vault 安全漏洞	30 Mar 202300:00	–	cnnvd
CVE	CVE-2023-0665	30 Mar 202300:21	–	cve
Cvelist	CVE-2023-0665 Vault PKI Issuer Endpoint Did Not Correctly Authorize Access to Issuer Metadata	30 Mar 202300:21	–	cvelist
EUVD	EUVD-2023-1040	3 Oct 202520:07	–	euvd
Github Security Blog	HashiCorp Vault's PKI mount vulnerable to denial of service	30 Mar 202303:30	–	github
NVD	CVE-2023-0665	30 Mar 202301:15	–	nvd
OSV	BIT-VAULT-2023-0665 Vault PKI Issuer Endpoint Did Not Correctly Authorize Access to Issuer Metadata	6 Mar 202411:09	–	osv

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-0665
discuss	www.discuss.hashicorp.com/t/hcsec-2023-11-vault-s-pki-issuer-endpoint-did-not-correctly-authorize-access-to-issuer-metadata/52079/1
github	www.github.com/hashicorp/vault
security	www.security.netapp.com/advisory/ntap-20230526-0008

04 Feb 2026 02:54Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.16.5

EPSS0.001

hashicorp vault pki mount denial of service vulnerability issuer endpoints authorization bug fix software