CVE-2020-16250: High severity HashiCorp Vault vulnerability

Published Aug 26, 2020
·
Updated

A flaw was found in Vault and Vault Enterprise (“Vault”). In the affected versions of Vault, with the AWS Auth Method configured and under certain circumstances, the values relied upon by Vault to validate AWS IAM identities and roles may be manipulated and bypass authentication.

Other sources

A vulnerability was identified in Vault and Vault Enterprise (“Vault”) such that, with the AWS Auth Method configured and under certain circumstances, the values relied upon by Vault to validate AWS IAM identities and roles may be manipulated and authentication bypassed.

https://www.hashicorp.com/blog/category/vault/ https://github.com/hashicorp/vault/blob/master/CHANGELOG.md#151 http://packetstormsecurity.com/files/159478/Hashicorp-Vault-AWS-IAM-Integration-Authentication-Bypass.html

Red Hat

HashiCorp Vault and Vault Enterprise versions 0.7.1 and newer, when configured with the AWS IAM auth method, may be vulnerable to authentication bypass. Fixed in 1.2.5, 1.3.8, 1.4.4, and 1.5.1..

Affected Software

16 affected componentsFixes available
go/github.com/hashicorp/vault>=1.4.0<1.4.4
1.4.4
go/github.com/hashicorp/vault>=1.3.0<1.3.8
1.3.8
go/github.com/hashicorp/vault>=0.8.1<1.2.5
1.2.5
go/github.com/hashicorp/vault>=1.5.0<1.5.1
1.5.1
HashiCorp Vault>=0.7.1<1.2.5
HashiCorp Vault>=0.7.1<1.2.5
HashiCorp Vault>=1.3.0<1.3.8
HashiCorp Vault>=1.3.0<1.3.8
HashiCorp Vault>=1.4.0<1.4.4
HashiCorp Vault>=1.4.0<1.4.4
HashiCorp Vault>=1.5.0<1.5.1
HashiCorp Vault>=1.5.0<1.5.1
redhat/vault<1.2.5
1.2.5
redhat/vault<1.3.8
1.3.8
redhat/vault<1.4.4
1.4.4
redhat/vault<1.5.1
1.5.1

Event History

Aug 26, 2020
CVE Published
12:00 AM
Data Sourced
12:00 AM
RemedyDescriptionSeverityWeaknessAffected Software
CVE Published
via MITRE·02:17 PM
Data Sourced
via MITRE·02:17 PM
Description
Aug 2, 2021
Advisory Published
05:11 PM
Feb 6, 2023
Data Sourced
via Red Hat·10:36 AM
DescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Frequently Asked Questions

1

What is the vulnerability ID of this flaw?

The vulnerability ID is CVE-2020-16250.

2

What is the severity level of CVE-2020-16250?

The severity level of CVE-2020-16250 is high, with a CVSS score of 8.2.

3

Which versions of HashiCorp Vault are affected by CVE-2020-16250?

HashiCorp Vault versions 0.7.1 and newer are affected by CVE-2020-16250.

4

How can I fix the vulnerability CVE-2020-16250?

To fix the vulnerability CVE-2020-16250, update HashiCorp Vault to versions 1.2.5, 1.3.8, 1.4.4, or 1.5.1.

5

Where can I find more information about CVE-2020-16250?

You can find more information about CVE-2020-16250 on the CVE website (https://www.cve.org/CVERecord?id=CVE-2020-16250) and NVD website (https://nvd.nist.gov/vuln/detail/CVE-2020-16250).

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203