Privilege Escalation

vault is vulnerable to privilege escalation. The vulnerability exists because the wildcard certificates are authorized when the PKI role policy attribute is set to false which allows an attacker to gain access to the system...

CVE-2022-25243

"Vault and Vault Enterprise 1.8.0 through 1.8.8, and 1.9.3 allowed the PKI secrets engine under certain configurations to issue wildcard certificates to authorized users for a specified domain, even if the PKI role policy attribute allowsubdomains is set to false. Fixed in Vault Enterprise 1.8.9...