PT-2025-31678 · Hashicorp+2 · Vault+3

Yarden Porat · CVE-2025-6004 · Published 2025-08-01 · Updated 2025-10-01

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Vault versions prior to 1.20.1 Vault Enterprise versions prior to 1.20.1, 1.19.7, 1.18.12, and 1.16.23

Description The user lockout feature in Vault and Vault Enterprise could be bypassed for Userpass and LDAP authentication methods.

Recommendations Update to Vault Community Edition version 1.20.1 or later. Update to Vault Enterprise version 1.20.1, 1.19.7, 1.18.12, or 1.16.23 or later.

Exploit

Fix

DoS

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-307

Related Identifiers

ALT-PU-2025-12480

ALT-PU-2025-12489

BDU:2025-09564

BIT-VAULT-2025-6004

CVE-2025-6004

GHSA-J3XV-7FXP-GFHX

GHSA-QGJ7-FMQ2-6CC4

GO-2025-3840

GO-2025-3855

OPENSUSE-SU-2025:15434-1

OPENSUSE-SU-2025:15460-1

SUSE-SU-2025:02912-1

Affected Products

Alt Linux

Red Os

Vault

Vault Enterprise

References · 58

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/6xxx/CVE-2025-6004.json · Exploit
• https://osv.dev/vulnerability/GHSA-j3xv-7fxp-gfhx · Vendor Advisory
• https://osv.dev/vulnerability/GO-2025-3855 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-6004 · Security Note
• https://discuss.hashicorp.com/t/hcsec-2025-16-vault-userpass-and-ldap-user-lockout-bypass/76035 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-54998 · Security Note
• https://osv.dev/vulnerability/BIT-vault-2025-6004 · Vendor Advisory
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-qgj7-fmq2-6cc4 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15460-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-6004 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2025-3840 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-09564 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2025:15434-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02912-1 · Vendor Advisory