CVEvulnerability

CVE-2023-4680

6.8 MEDIUM Published 2023-09-15 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-09-15
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.8 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS 3.1 ([email protected])
6.8 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
Weaknesses
CWE-20, CWE-323

Description

HashiCorp Vault and Vault Enterprise transit secrets engine allowed authorized users to specify arbitrary nonces, even with convergent encryption disabled. The encrypt endpoint, in combination with an offline attack, could be used to decrypt arbitrary ciphertext and potentially derive the authentication subkey when using transit secrets engine without convergent encryption. Introduced in 1.6.0 and fixed in 1.14.3, 1.13.7, and 1.12.11.

Affected configurations

• hashicorp vault (>= 1.6.0 < 1.12.11) • hashicorp vault (>= 1.13.0 < 1.13.7) • hashicorp vault (>= 1.14.0 < 1.14.3)

Related

Weakness · CWE (2)

  • CWE-20 Improper Input Validation weakness
  • CWE-323 Reusing a Nonce, Key Pair in Encryption weakness

References