Hashicorp · Vault Enterprise · CVE-2023-3775
**Name of the Vulnerable Software and Affected Versions**
Vault Enterprise versions prior to 1.15.0
Vault Enterprise versions prior to 1.14.4
Vault Enterprise versions prior to 1.13.8
**Description**
A Vault Enterprise Sentinel Role Governing Policy created by an operator to restrict access to resources in one namespace can be applied to requests outside in another non-descendant namespace, potentially resulting in denial of service.
**Recommendations**
For Vault Enterprise versions prior to 1.15.0, update to version 1.15.0 or later.
For Vault Enterprise versions prior to 1.14.4, update to version 1.14.4 or later.
For Vault Enterprise versions prior to 1.13.8, update to version 1.13.8 or later.