PT-2025-31663 · Hashicorp+1 · Vault Enterprise+2

Yarden Porat · Published 2025-08-01 · Updated 2025-09-05 · CVE-2025-6037

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Vault versions prior to 1.20.1 Vault Enterprise versions prior to 1.20.1 Vault Enterprise versions prior to 1.19.7 Vault Enterprise versions prior to 1.18.12 Vault Enterprise versions prior to 1.16.23

Description The TLS certificate auth method in Vault and Vault Enterprise did not correctly validate client certificates when configured with a non-CA certificate as a trusted certificate. This allowed an attacker to potentially craft a malicious certificate to impersonate another user.

Recommendations Update Vault to version 1.20.1 or later. Update Vault Enterprise to version 1.20.1 or later. Update Vault Enterprise to version 1.19.7 or later. Update Vault Enterprise to version 1.18.12 or later. Update Vault Enterprise to version 1.16.23 or later.

Fix

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

BDU:2025-09561

BIT-VAULT-2025-6037

CVE-2025-6037

GHSA-6C5R-4WFC-3MCX

GO-2025-3836

OPENSUSE-SU-2025:15434-1

SUSE-SU-2025:02912-1

Affected Products

Red Os

Vault

Vault Enterprise

References · 48

• https://osv.dev/vulnerability/CVE-2025-6037 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15434-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-6037 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:02912-1 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-vault-2025-6037 · Vendor Advisory
• https://discuss.hashicorp.com/t/hcsec-2025-18-vault-certificate-auth-method-did-not-validate-common-name-for-non-ca-certificates/76037 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2025-3836 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-6c5r-4wfc-3mcx · Vendor Advisory
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-09561 · Security Note
• https://github.com/hashicorp/vault · Note
• https://suse.com/security/cve/CVE-2025-5999 · Note
• https://suse.com/security/cve/CVE-2025-54998 · Note
• https://suse.com/security/cve/CVE-2025-6000 · Note
• https://suse.com/security/cve/CVE-2025-54999 · Note