GitHub Advisoryadvisory · Go

GHSA-7cgv-v83v-rr87 HashiCorp Vault vulnerable to incorrect metadata access

CRITICAL Published 2022-09-23 Modified 2025-05-28 Official page ↗
Aliases
CVE-2022-40186
Ecosystem
Go
Packages
github.com/hashicorp/vault
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weaknesses
CWE-639
Reviewed
2022-09-23

Affected packages

• Go github.com/hashicorp/vault: >= 1.11.0, < 1.11.3 → fixed in 1.11.3 • Go github.com/hashicorp/vault: >= 1.10.0, < 1.10.6 → fixed in 1.10.6 • Go github.com/hashicorp/vault: >= 1.8.0, < 1.9.9 → fixed in 1.9.9

Description

An issue was discovered in HashiCorp Vault and Vault Enterprise before 1.11.3. A vulnerability in the Identity Engine was found where, in a deployment where an entity has multiple mount accessors with shared alias names, Vault may overwrite metadata to the wrong alias due to an issue with checking the proper alias assigned to an entity. This may allow for unintended access to key/value paths using that metadata in Vault.

Related

Alias · CVE (1)

  • CVE-2022-40186 An issue was discovered in HashiCorp Vault and Vault Enterprise before 1.11.3. vulnerability

Weakness · CWE (1)

  • CWE-639 Authorization Bypass Through User-Controlled Key weakness

References