What is GHSA-v84f-6r39-cpfc?

GHSA-v84f-6r39-cpfc is a security advisory published by GitHub Security Advisories with Medium severity. HashiCorp Vault Improper Input Validation vulnerability

Which CVE IDs does GHSA-v84f-6r39-cpfc cover?

GHSA-v84f-6r39-cpfc covers the following CVE IDs: CVE-2023-4680. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-v84f-6r39-cpfc?

GHSA-v84f-6r39-cpfc has a CVSS v3 base score of 6.8, published by GitHub Security Advisories.

Which products are affected by GHSA-v84f-6r39-cpfc?

GHSA-v84f-6r39-cpfc affects 3 products, including: go/github.com/hashicorp/vault:\u003e= 1.6.0, \u003c 1.12.11; go/github.com/hashicorp/vault:\u003e= 1.13.0, \u003c 1.13.7; go/github.com/hashicorp/vault:\u003e= 1.14.0, \u003c 1.14.3.

GHSA-v84f-6r39-cpfcMediumCVSS 6.8

HashiCorp Vault Improper Input Validation vulnerability

Vendor

GitHub Security Advisories

Published

September 15, 2023

Last Modified

September 26, 2024

🔗 CVE IDs covered (1)

CVE-2023-4680 →

📋 Description

HashiCorp Vault and Vault Enterprise transit secrets engine allowed authorized users to specify arbitrary nonces, even with convergent encryption disabled. The encrypt endpoint, in combination with an offline attack, could be used to decrypt arbitrary ciphertext and potentially derive the authentication subkey when using transit secrets engine without convergent encryption. Introduced in 1.6.0 and fixed in 1.14.3, 1.13.7, and 1.12.11.

🎯 Affected products3

go/github.com/hashicorp/vault:>= 1.6.0, < 1.12.11
go/github.com/hashicorp/vault:>= 1.13.0, < 1.13.7
go/github.com/hashicorp/vault:>= 1.14.0, < 1.14.3

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2023-4680
https://discuss.hashicorp.com/t/hcsec-2023-28-vault-s-transit-secrets-engine-allowed-nonce-specified-without-convergent-encryption/58249
https://github.com/advisories/GHSA-v84f-6r39-cpfc