HashiCorp Vault/Vault Enterprise up to 1.14.9/1.15.x TLS Certificate certificate validation

Summaryinfo

A vulnerability classified as critical has been found in HashiCorp Vault and Vault Enterprise up to 1.14.9/1.15.x. The affected element is an unknown function of the component TLS Certificate Handler. Performing a manipulation results in certificate validation. This vulnerability was named CVE-2024-2048. The attack may be initiated remotely. There is no available exploit. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability was found in HashiCorp Vault and Vault Enterprise up to 1.14.9/1.15.x. It has been classified as problematic. This affects some unknown processing of the component TLS Certificate Handler. The manipulation with an unknown input leads to a certificate validation vulnerability. CWE is classifying the issue as CWE-295. The product does not validate, or incorrectly validates, a certificate. This is going to have an impact on confidentiality. The summary by CVE is:

Vault and Vault Enterprise (“Vault”) TLS certificate auth method did not correctly validate client certificates when configured with a non-CA certificate as trusted certificate. In this configuration, an attacker may be able to craft a malicious certificate that could be used to bypass authentication. Fixed in Vault 1.15.5 and 1.14.10.

The weakness was presented 03/05/2024. It is possible to read the advisory at discuss.hashicorp.com. This vulnerability is uniquely identified as CVE-2024-2048 since 03/01/2024. The technical details are unknown and an exploit is not publicly available. The attack technique deployed by this issue is T1587.003 according to MITRE ATT&CK.

Upgrading to version 1.14.10 or 1.16.0 eliminates this vulnerability.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Vendor

• HashiCorp

Name

• Vault
• Vault Enterprise

Version

• 1.0
• 1.1
• 1.2
• 1.3
• 1.4
• 1.5
• 1.6
• 1.7
• 1.8
• 1.9
• 1.10
• 1.11
• 1.12
• 1.13
• 1.14
• 1.14.0
• 1.14.1
• 1.14.2
• 1.14.3
• 1.14.4
• 1.14.5
• 1.14.6
• 1.14.7
• 1.14.8
• 1.14.9
• 1.15

License

• open-source

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion