CVEvulnerability

CVE-2024-7594

8.8 HIGH Published 2024-09-26 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-09-26
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-732

Description

Vault’s SSH secrets engine did not require the valid_principals list to contain a value by default. If the valid_principals and default_user fields of the SSH secrets engine configuration are not set, an SSH certificate requested by an authorized user to Vault’s SSH secrets engine could be used to authenticate as any user on the host. Fixed in Vault Community Edition 1.17.6, and in Vault Enterprise 1.17.6, 1.16.10, and 1.15.15.

Affected configurations

• hashicorp vault (>= 1.7.7 < 1.15.15) • hashicorp vault (>= 1.7.7 < 1.17.6) • hashicorp vault (>= 1.16.0 < 1.16.10) • hashicorp vault (>= 1.17.0 < 1.17.6) • openbao openbao (< 2.0.2)

Related

Weakness · CWE (1)

  • CWE-732 Incorrect Permission Assignment for Critical Resource weakness

References