BIT-vault-2023-24999

vendorUSosv

Vault Fails to Verify if the AppRole SecretID Belongs to Role During a Destroy Operation

view advisory published 2024-03-06Licence: per source

HashiCorp Vault and Vault Enterprise’s approle auth method allowed any authenticated user with access to an approle destroy endpoint to destroy the secret ID of any other role by providing the secret ID accessor. This vulnerability is fixed in Vault 1.13.0, 1.12.4, 1.11.8, 1.10.11 and above.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2023-24999US	high8.1OT elevated	0.60% (48th)	—	2023-03-11
HashiCorp Vault and Vault Enterprise’s approle auth method allowed any authenticated user with access to an approle destroy endpoint to destroy the secret ID of any other role by p…

references

External citations — patches, advisories, analysis.

https://discuss.hashicorp.com/t/hcsec-2023-07-vault-fails-to-verify-if-approle-secretid-belongs-to-role-during-a-destroy-operation/51305ADVISORY
https://nvd.nist.gov/vuln/detail/CVE-2023-24999WEB
https://security.netapp.com/advisory/ntap-20230505-0001/WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan