DeutschShown in its original language — a full translation is planned for a future version.
Hashicorp Vault Community und Enterprise: Mehrere Schwachstellen
view advisory published 2025-08-03
Ein Angreifer kann mehrere Schwachstellen in Hashicorp Vault ausnutzen, um erhöhte Rechte zu erlangen, Sicherheitsmaßnahmen zu umgehen, beliebigen Code auszuführen und vertrauliche Informationen preiszugeben.
01
describes (7)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-6037US | — | — | ||
Vault and Vault Enterprise (“Vault”) TLS certificate auth method did not correctly validate client certificates when configured with a non-CA certificate as [+trusted certificate+|… | ||||
| CVE-2025-6015US | — | — | ||
Vault and Vault Enterprise’s (“Vault”) login MFA rate limits could be bypassed and TOTP tokens could be reused. Fixed in Vault Community Edition 1.20.1 and Vault Enterprise 1.20.1,… | ||||
| CVE-2025-6014US | — | — | ||
Vault and Vault Enterprise’s (“Vault”) TOTP Secrets Engine code validation endpoint is susceptible to code reuse within its validity period. Fixed in Vault Community Edition 1.20.1… | ||||
| CVE-2025-6011US | — | — | ||
A timing side channel in Vault and Vault Enterprise’s (“Vault”) userpass auth method allowed an attacker to distinguish between existing and non-existing users, and potentially enu… | ||||
| CVE-2025-6004US | — | — | ||
Vault and Vault Enterprise’s (“Vault”) user lockout feature could be bypassed for Userpass and LDAP authentication methods. Fixed in Vault Community Edition 1.20.1 and Vault Enterp… | ||||
| CVE-2025-6000US | — | — | ||
A privileged Vault operator within the root namespace with write permission to {{sys/audit}} may obtain code execution on the underlying host if a plugin directory is set in Vault’… | ||||
| CVE-2025-5999US | — | — | ||
A privileged Vault operator with write permissions to the root namespace’s identity endpoint could escalate their own or another user’s token privileges to Vault’s root policy. Fix… | ||||
02
references
External citations — patches, advisories, analysis.
- Vault Security Advisory vom 2025-08-03external
- Vault Security Advisory vom 2025-08-03external
- Vault Security Advisory vom 2025-08-03external
- Vault Security Advisory vom 2025-08-03external
- Vault Security Advisory vom 2025-08-03external
- Vault Security Advisory vom 2025-08-03external
- GitHub Advisory Database vom 2025-08-03external
- GitHub Advisory Database vom 2025-08-03external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan