Moole Vulnerability Database

Find real vulnerabilities before they ship

High

CVE-2020-16251

HashiCorp Vault and Vault Enterprise versions 0.8.3 and newer, when configured with the GCP GCE auth method, may be vulnerable to authentication bypass. Fixed in 1.2.5, 1.3.8, 1.4.4, and 1.5.1.

VectorNETWORK

PublishedAug 26, 2020, 15:15

Published Bycve@mitre.org

Base Score

Score8.2

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

github.com/hashicorp/vault(Go)0.8.31.2.5N/A

github.com/hashicorp/vault(Go)1.3.01.3.8N/A

github.com/hashicorp/vault(Go)1.4.01.4.4N/A

github.com/hashicorp/vault(Go)1.5.01.5.1N/A

References

http://packetstormsecurity.com/files/159479/Hashicorp-Vault-GCP-IAM-Integration-Authentication-Bypass.html
https://github.com/hashicorp/vault/blob/master/CHANGELOG.md#151
https://www.hashicorp.com/blog/category/vault/

Weakness Type

CWE-287

CVSS Metrics

Base Score

8.2

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

Base SeverityHigh

Version

3.1

Attack Vector (AV)

NETWORK