PT-2021-23415 · Hashicorp · Vault Enterprise+1

Mdgreenfield · Published 2021-10-08 · Updated 2024-08-21 · CVE-2021-41802

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions HashiCorp Vault and Vault Enterprise versions 1.7.0 through 1.7.4 HashiCorp Vault and Vault Enterprise versions 1.8.0 through 1.8.3

Description The issue allows a user with write permission to an entity alias ID sharing a mount accessor with another user to acquire this other user’s policies by merging their identities.

Recommendations For HashiCorp Vault and Vault Enterprise versions 1.7.0 through 1.7.4, update to version 1.7.5 to resolve the issue. For HashiCorp Vault and Vault Enterprise versions 1.8.0 through 1.8.3, update to version 1.8.4 to resolve the issue.

Fix

Improper Privilege Management

Incorrect Permission

Weakness Enumeration

CWE-269

CWE-732

Related Identifiers

BIT-VAULT-2021-41802

CVE-2021-41802

GHSA-QV95-G3GM-X542

GO-2022-0618

Affected Products

Hashicorp Vault

Vault Enterprise

References · 10

• https://osv.dev/vulnerability/CVE-2021-41802 · Vendor Advisory
• https://discuss.hashicorp.com/t/hcsec-2021-27-vault-merging-multiple-entity-aliases-for-the-same-mount-may-allow-privilege-escalation · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-41802 · Security Note
• https://osv.dev/vulnerability/BIT-vault-2021-41802 · Vendor Advisory
• https://security.gentoo.org/glsa/202207-01 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2022-0618 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-qv95-g3gm-x542 · Vendor Advisory
• https://github.com/hashicorp/vault · Note
• https://github.com/advisories/GHSA-qv95-g3gm-x542 · Note
• https://t.me/cibsecurity/30255 · Telegram Post