BIT-VAULT-2023-5954 Vault Requests Triggering Policy Checks May Lead To Unbounded Memory Consumption

HashiCorp Vault and Vault Enterprise inbound client requests triggering a policy check can lead to an unbounded consumption of memory. A large number of these requests may lead to denial-of-service. Fixed in Vault 1.15.2, 1.14.6, and 1.13.10...

BIT-VAULT-2023-6337 Vault May be Vulnerable to a Denial of Service Through Memory Exhaustion When Handling Large HTTP Requests

HashiCorp Vault and Vault Enterprise 1.12.0 and newer are vulnerable to a denial of service through memory exhaustion of the host when handling large unauthenticated and authenticated HTTP requests from a client. Vault will attempt to map the request to memory, resulting in the exhaustion of...

BIT-VAULT-2024-0831 Vault May Expose Sensitive Information When Configuring An Audit Log Device

Vault and Vault Enterprise “Vault” may expose sensitive information when enabling an audit device which specifies the lograw option, which may log sensitive information to other audit devices, regardless of whether they are configured to use lograw...

The vulnerability of the MSSQL Database Storage Backend component in the platform for archiving corporate information, HashiCorp Vault and Vault Enterprise, allows a perpetrator to execute arbitrary SQL commands.

The vulnerability of the MSSQL Database Storage Backend component in the HashiCorp Vault and Vault Enterprise archiving platforms relates to the lack of security measures for SQL query structures. Exploiting this vulnerability allows attackers to execute arbitrary SQL commands...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-hostpath, configmap-reload-fips, argo-workflows, pulumi-language-yaml, k3d, aws-load-balancer-controller, external-secrets-fips, newrelic-infra-operator, falcosidekick-fips, doppler-kubernetes-operator, influx, trivy, cosign,...

CVE-2023-45289 vulnerabilities

Vulnerabilities for packages: go-bindata, govulncheck, thanos-operator, goreleaser, dynamic-localpv-provisioner, cue, cluster-proportional-autoscaler, kubewatch, sonobuoy, kubeflow-pipelines, docker-credential-acr-env, grafana-operator, envoy-ratelimit, flannel-cni-plugin, nri-rabbitmq,...

GHSA-R3W7-MFPM-C2VW Incorrect TLS certificate auth method in Vault

Vault and Vault Enterprise “Vault” TLS certificate auth method did not correctly validate client certificates when configured with a non-CA certificate as trusted certificate. In this configuration, an attacker may be able to craft a malicious certificate that could be used to bypass...

GHSA-R3W7-MFPM-C2VW vulnerabilities

Vulnerabilities for packages: k3d...

Incorrect TLS certificate auth method in Vault

Vault and Vault Enterprise “Vault” TLS certificate auth method did not correctly validate client certificates when configured with a non-CA certificate as trusted certificate. In this configuration, an attacker may be able to craft a malicious certificate that could be used to bypass...

GHSA-7JWH-3VRQ-Q3M8 vulnerabilities

Vulnerabilities for packages: spicedb, argo-workflows, step-ca, kots, temporal-server, trillian-fips, kine, wavefront-collector-for-kubernetes, src, trillian, falcosidekick-fips, step, caddy-fips, kube-bench-fips, argo-workflows-fips, ferretdb, caddy, k3s, temporal-server-fips, kube-bench, amass...

GHSA-MRWW-27VC-GGHV vulnerabilities

Vulnerabilities for packages: spicedb, argo-workflows, step-ca, kots, temporal-server, trillian-fips, kine, wavefront-collector-for-kubernetes, src, trillian, falcosidekick-fips, step, caddy-fips, kube-bench-fips, argo-workflows-fips, ferretdb, caddy, k3s, temporal-server-fips, kube-bench, amass...

CVE-2024-2048

Vault and Vault Enterprise “Vault” TLS certificate auth method did not correctly validate client certificates when configured with a non-CA certificate as trusted certificate. In this configuration, an attacker may be able to craft a malicious certificate that could be used to bypass...

CVE-2024-2048 vulnerabilities

Vulnerabilities for packages: k3d...

Authentication flaw

Vault and Vault Enterprise “Vault” TLS certificate auth method did not correctly validate client certificates when configured with a non-CA certificate as trusted certificate. In this configuration, an attacker may be able to craft a malicious certificate that could be used to bypass...

GHSA-M7WR-2XF7-CM9P vulnerabilities

Vulnerabilities for packages: step, caddy-fips, trillian, argo-workflows-fips, trillian-fips, argo-workflows, step-ca, wavefront-collector-for-kubernetes, kots, caddy...

CVE-2024-2048 Vault Cert Auth Method Did Not Correctly Validate Non-CA Certificates

Vault and Vault Enterprise “Vault” TLS certificate auth method did not correctly validate client certificates when configured with a non-CA certificate as trusted certificate. In this configuration, an attacker may be able to craft a malicious certificate that could be used to bypass...

CVE-2024-2048

CVE-2024-2048 affects Vault and Vault Enterprise where TLS certificate auth did not properly validate client certificates when configured with a non-CA trusted certificate, potentially allowing certificate-based authentication bypass. The issue is fixed in Vault 1.15.5 and 1.14.10.

CVE-2024-2048 Vault Cert Auth Method Did Not Correctly Validate Non-CA Certificates

Vault and Vault Enterprise “Vault” TLS certificate auth method did not correctly validate client certificates when configured with a non-CA certificate as trusted certificate. In this configuration, an attacker may be able to craft a malicious certificate that could be used to bypass...

CVE-2024-2048 Vault Cert Auth Method Did Not Correctly Validate Non-CA Certificates

Vault and Vault Enterprise “Vault” TLS certificate auth method did not correctly validate client certificates when configured with a non-CA certificate as trusted certificate. In this configuration, an attacker may be able to craft a malicious certificate that could be used to bypass...

Vault Cert Auth Method Did Not Correctly Validate Non-CA Certificates

Summary Vault and Vault Enterprise “Vault” TLS certificate auth method did not correctly validate client certificates when configured with a non-CA certificate as trusted certificate . In this configuration, an attacker may be able to craft a malicious certificate that could be used to bypass...