Vulnerability Details CVE-2023-24999
HashiCorp Vault and Vault Enterprise’s approle auth method allowed any authenticated user with access to an approle destroy endpoint to destroy the secret ID of any other role by providing the secret ID accessor. This vulnerability is fixed in Vault 1.13.0, 1.12.4, 1.11.8, 1.10.11 and above.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 31.1%
CVSS Severity
CVSS v3 Score 4.4
References
- https://discuss.hashicorp.com/t/hcsec-2023-07-vault-fails-to-verify-if-approle-secretid-belongs-to-role-during-a-destroy-operation/51305
- https://security.netapp.com/advisory/ntap-20230505-0001/
- https://discuss.hashicorp.com/t/hcsec-2023-07-vault-fails-to-verify-if-approle-secretid-belongs-to-role-during-a-destroy-operation/51305
- https://security.netapp.com/advisory/ntap-20230505-0001/
Products affected by CVE-2023-24999
-
cpe:2.3:a:hashicorp:vault:0.10.0
-
cpe:2.3:a:hashicorp:vault:0.11.0
-
cpe:2.3:a:hashicorp:vault:0.9.2
-
cpe:2.3:a:hashicorp:vault:1.0.0
-
cpe:2.3:a:hashicorp:vault:1.0.1
-
cpe:2.3:a:hashicorp:vault:1.0.2
-
cpe:2.3:a:hashicorp:vault:1.0.3
-
cpe:2.3:a:hashicorp:vault:1.1.0
-
cpe:2.3:a:hashicorp:vault:1.1.1
-
cpe:2.3:a:hashicorp:vault:1.1.2
-
cpe:2.3:a:hashicorp:vault:1.1.3
-
cpe:2.3:a:hashicorp:vault:1.1.4
-
cpe:2.3:a:hashicorp:vault:1.1.5
-
cpe:2.3:a:hashicorp:vault:1.10.0
-
cpe:2.3:a:hashicorp:vault:1.10.2
-
cpe:2.3:a:hashicorp:vault:1.10.3
-
cpe:2.3:a:hashicorp:vault:1.10.7
-
cpe:2.3:a:hashicorp:vault:1.11.0
-
cpe:2.3:a:hashicorp:vault:1.11.3
-
cpe:2.3:a:hashicorp:vault:1.11.4
-
cpe:2.3:a:hashicorp:vault:1.12.0
-
cpe:2.3:a:hashicorp:vault:1.2.0
-
cpe:2.3:a:hashicorp:vault:1.2.1
-
cpe:2.3:a:hashicorp:vault:1.2.2
-
cpe:2.3:a:hashicorp:vault:1.2.3
-
cpe:2.3:a:hashicorp:vault:1.2.4
-
cpe:2.3:a:hashicorp:vault:1.2.5
-
cpe:2.3:a:hashicorp:vault:1.3.0
-
cpe:2.3:a:hashicorp:vault:1.3.1
-
cpe:2.3:a:hashicorp:vault:1.3.2
-
cpe:2.3:a:hashicorp:vault:1.3.3
-
cpe:2.3:a:hashicorp:vault:1.3.4
-
cpe:2.3:a:hashicorp:vault:1.3.5
-
cpe:2.3:a:hashicorp:vault:1.3.6
-
cpe:2.3:a:hashicorp:vault:1.3.8
-
cpe:2.3:a:hashicorp:vault:1.4.0
-
cpe:2.3:a:hashicorp:vault:1.4.1
-
cpe:2.3:a:hashicorp:vault:1.4.2
-
cpe:2.3:a:hashicorp:vault:1.4.3
-
cpe:2.3:a:hashicorp:vault:1.4.4
-
cpe:2.3:a:hashicorp:vault:1.4.5
-
cpe:2.3:a:hashicorp:vault:1.4.5.1
-
cpe:2.3:a:hashicorp:vault:1.4.6
-
cpe:2.3:a:hashicorp:vault:1.4.7
-
cpe:2.3:a:hashicorp:vault:1.5.0
-
cpe:2.3:a:hashicorp:vault:1.5.1
-
cpe:2.3:a:hashicorp:vault:1.5.2
-
cpe:2.3:a:hashicorp:vault:1.5.2.1
-
cpe:2.3:a:hashicorp:vault:1.5.3
-
cpe:2.3:a:hashicorp:vault:1.5.4
-
cpe:2.3:a:hashicorp:vault:1.5.5
-
cpe:2.3:a:hashicorp:vault:1.5.6
-
cpe:2.3:a:hashicorp:vault:1.5.7
-
cpe:2.3:a:hashicorp:vault:1.5.8
-
cpe:2.3:a:hashicorp:vault:1.5.9
-
cpe:2.3:a:hashicorp:vault:1.6.0
-
cpe:2.3:a:hashicorp:vault:1.6.1
-
cpe:2.3:a:hashicorp:vault:1.6.2
-
cpe:2.3:a:hashicorp:vault:1.6.3
-
cpe:2.3:a:hashicorp:vault:1.6.4
-
cpe:2.3:a:hashicorp:vault:1.6.5
-
cpe:2.3:a:hashicorp:vault:1.7.0
-
cpe:2.3:a:hashicorp:vault:1.7.1
-
cpe:2.3:a:hashicorp:vault:1.7.10
-
cpe:2.3:a:hashicorp:vault:1.7.2
-
cpe:2.3:a:hashicorp:vault:1.7.3
-
cpe:2.3:a:hashicorp:vault:1.7.4
-
cpe:2.3:a:hashicorp:vault:1.7.5
-
cpe:2.3:a:hashicorp:vault:1.7.6
-
cpe:2.3:a:hashicorp:vault:1.7.7
-
cpe:2.3:a:hashicorp:vault:1.7.8
-
cpe:2.3:a:hashicorp:vault:1.7.9
-
cpe:2.3:a:hashicorp:vault:1.8.0
-
cpe:2.3:a:hashicorp:vault:1.8.3
-
cpe:2.3:a:hashicorp:vault:1.8.4
-
cpe:2.3:a:hashicorp:vault:1.8.6
-
cpe:2.3:a:hashicorp:vault:1.8.7
-
cpe:2.3:a:hashicorp:vault:1.8.8
-
cpe:2.3:a:hashicorp:vault:1.8.9
-
cpe:2.3:a:hashicorp:vault:1.9.0
-
cpe:2.3:a:hashicorp:vault:1.9.1
-
cpe:2.3:a:hashicorp:vault:1.9.10
-
cpe:2.3:a:hashicorp:vault:1.9.2
-
cpe:2.3:a:hashicorp:vault:1.9.3
-
cpe:2.3:a:hashicorp:vault:1.9.4