PT-2022-25266 · Hashicorp+1 · Hashicorp Vault Enterprise+2

Published 2022-09-21 · Updated 2025-04-02 · CVE-2022-40186

Positive Technologies (AI Summary)

CVSS v2.0

9.4

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions HashiCorp Vault versions prior to 1.11.3 HashiCorp Vault Enterprise versions prior to 1.11.3

Description A vulnerability in the Identity Engine of HashiCorp Vault was found where, in a deployment with an entity having multiple mount accessors with shared alias names, Vault may overwrite metadata to the wrong alias. This issue arises due to a problem with checking the proper alias assigned to an entity, potentially allowing unintended access to key/value paths using that metadata in Vault.

Recommendations For HashiCorp Vault versions prior to 1.11.3, update to version 1.11.3 or later to resolve the issue. For HashiCorp Vault Enterprise versions prior to 1.11.3, update to version 1.11.3 or later to resolve the issue.

Fix

IDOR

Weakness Enumeration

CWE-639

CWE-264

Related Identifiers

BDU:2025-04009

BIT-VAULT-2022-40186

CVE-2022-40186

GHSA-7CGV-V83V-RR87

GO-2022-1021

Affected Products

Hashicorp Vault

Hashicorp Vault Enterprise

Red Os

References · 14

• https://osv.dev/vulnerability/BIT-vault-2022-40186 · Vendor Advisory
• https://discuss.hashicorp.com/t/hcsec-2022-18-vault-entity-alias-metadata-may-leak-between-aliases-with-the-same-name-assigned-to-the-same-entity/44550 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-40186 · Security Note
• https://discuss.hashicorp.com · Vendor Advisory
• https://osv.dev/vulnerability/GO-2022-1021 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-40186 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-04009 · Security Note
• https://osv.dev/vulnerability/GHSA-7cgv-v83v-rr87 · Vendor Advisory
• https://github.com/hashicorp/vault · Note
• https://redos.red-soft.ru/support/secure · Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/uyazvimost-vault-cve-2022-40186 · Note
• https://security.netapp.com/advisory/ntap-20221111-0008 · Note
• https://github.com/advisories/GHSA-7cgv-v83v-rr87 · Note
• https://t.me/cibsecurity/50252 · Telegram Post