Vulnerability Details CVE-2021-41802
HashiCorp Vault and Vault Enterprise through 1.7.4 and 1.8.3 allowed a user with write permission to an entity alias ID sharing a mount accessor with another user to acquire this other user’s policies by merging their identities. Fixed in Vault and Vault Enterprise 1.7.5 and 1.8.4.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 37.6%
CVSS Severity
CVSS v3 Score 2.9
CVSS v2 Score 5.5
References
- https://discuss.hashicorp.com/t/hcsec-2021-27-vault-merging-multiple-entity-aliases-for-the-same-mount-may-allow-privilege-escalation/
- https://security.gentoo.org/glsa/202207-01
- https://discuss.hashicorp.com/t/hcsec-2021-27-vault-merging-multiple-entity-aliases-for-the-same-mount-may-allow-privilege-escalation/
- https://security.gentoo.org/glsa/202207-01
Products affected by CVE-2021-41802
-
cpe:2.3:a:hashicorp:vault:0.10.0
-
cpe:2.3:a:hashicorp:vault:0.11.0
-
cpe:2.3:a:hashicorp:vault:0.9.2
-
cpe:2.3:a:hashicorp:vault:1.0.0
-
cpe:2.3:a:hashicorp:vault:1.0.1
-
cpe:2.3:a:hashicorp:vault:1.0.2
-
cpe:2.3:a:hashicorp:vault:1.0.3
-
cpe:2.3:a:hashicorp:vault:1.1.0
-
cpe:2.3:a:hashicorp:vault:1.1.1
-
cpe:2.3:a:hashicorp:vault:1.1.2
-
cpe:2.3:a:hashicorp:vault:1.1.3
-
cpe:2.3:a:hashicorp:vault:1.1.4
-
cpe:2.3:a:hashicorp:vault:1.1.5
-
cpe:2.3:a:hashicorp:vault:1.2.0
-
cpe:2.3:a:hashicorp:vault:1.2.1
-
cpe:2.3:a:hashicorp:vault:1.2.2
-
cpe:2.3:a:hashicorp:vault:1.2.3
-
cpe:2.3:a:hashicorp:vault:1.2.4
-
cpe:2.3:a:hashicorp:vault:1.2.5
-
cpe:2.3:a:hashicorp:vault:1.3.0
-
cpe:2.3:a:hashicorp:vault:1.3.1
-
cpe:2.3:a:hashicorp:vault:1.3.2
-
cpe:2.3:a:hashicorp:vault:1.3.3
-
cpe:2.3:a:hashicorp:vault:1.3.4
-
cpe:2.3:a:hashicorp:vault:1.3.5
-
cpe:2.3:a:hashicorp:vault:1.3.6
-
cpe:2.3:a:hashicorp:vault:1.3.8
-
cpe:2.3:a:hashicorp:vault:1.4.0
-
cpe:2.3:a:hashicorp:vault:1.4.1
-
cpe:2.3:a:hashicorp:vault:1.4.2
-
cpe:2.3:a:hashicorp:vault:1.4.3
-
cpe:2.3:a:hashicorp:vault:1.4.4
-
cpe:2.3:a:hashicorp:vault:1.4.5
-
cpe:2.3:a:hashicorp:vault:1.4.5.1
-
cpe:2.3:a:hashicorp:vault:1.4.6
-
cpe:2.3:a:hashicorp:vault:1.4.7
-
cpe:2.3:a:hashicorp:vault:1.5.0
-
cpe:2.3:a:hashicorp:vault:1.5.1
-
cpe:2.3:a:hashicorp:vault:1.5.2
-
cpe:2.3:a:hashicorp:vault:1.5.2.1
-
cpe:2.3:a:hashicorp:vault:1.5.3
-
cpe:2.3:a:hashicorp:vault:1.5.4
-
cpe:2.3:a:hashicorp:vault:1.5.5
-
cpe:2.3:a:hashicorp:vault:1.5.6
-
cpe:2.3:a:hashicorp:vault:1.5.7
-
cpe:2.3:a:hashicorp:vault:1.5.8
-
cpe:2.3:a:hashicorp:vault:1.5.9
-
cpe:2.3:a:hashicorp:vault:1.6.0
-
cpe:2.3:a:hashicorp:vault:1.6.1
-
cpe:2.3:a:hashicorp:vault:1.6.2
-
cpe:2.3:a:hashicorp:vault:1.6.3
-
cpe:2.3:a:hashicorp:vault:1.6.4
-
cpe:2.3:a:hashicorp:vault:1.6.5
-
cpe:2.3:a:hashicorp:vault:1.7.0
-
cpe:2.3:a:hashicorp:vault:1.7.1
-
cpe:2.3:a:hashicorp:vault:1.7.2
-
cpe:2.3:a:hashicorp:vault:1.7.3
-
cpe:2.3:a:hashicorp:vault:1.7.4
-
cpe:2.3:a:hashicorp:vault:1.8.0
-
cpe:2.3:a:hashicorp:vault:1.8.3