PT-2025-31679 · Hashicorp+2 · Vault Enterprise+3

Yarden Porat · Published 2025-08-01 · Updated 2025-10-01 · CVE-2025-6011

Positive Technologies (AI Summary)

CVSS v3.1

3.7

Low

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Vault versions prior to 1.20.1 Vault Enterprise versions prior to 1.20.1 Vault Enterprise version 1.19.7 Vault Enterprise version 1.18.12 Vault Enterprise version 1.16.23

Description A timing side channel in the userpass authentication method allowed an attacker to differentiate between existing and non-existing users, potentially enabling the enumeration of valid usernames.

Recommendations Update Vault to version 1.20.1 or later. Update Vault Enterprise to version 1.20.1 or later. Update Vault Enterprise to version 1.19.7 or later. Update Vault Enterprise to version 1.18.12 or later. Update Vault Enterprise to version 1.16.23 or later.

Fix

Side Channel Attack

Weakness Enumeration

CWE-203

CWE-208

Related Identifiers

ALT-PU-2025-12480

ALT-PU-2025-12489

BDU:2025-11264

BIT-VAULT-2025-6011

CVE-2025-6011

GHSA-HH28-H22F-8357

GHSA-MWGR-84FV-3JH9

GO-2025-3839

GO-2025-3854

OPENSUSE-SU-2025:15434-1

OPENSUSE-SU-2025:15460-1

SUSE-SU-2025:02912-1

Affected Products

Alt Linux

Red Os

Vault

Vault Enterprise

References · 56

• https://discuss.hashicorp.com/t/hcsec-2025-15-timing-side-channel-in-vault-s-userpass-auth-method/76034 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02912-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-54999 · Security Note
• https://osv.dev/vulnerability/GHSA-hh28-h22f-8357 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-6011 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2025-3854 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2025-3839 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-6011 · Security Note
• https://osv.dev/vulnerability/GHSA-mwgr-84fv-3jh9 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-vault-2025-6011 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15434-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-11264 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2025:15460-1 · Vendor Advisory
• https://github.com/hashicorp/vault · Note
• https://github.com/openbao/openbao · Note