CVE-2023-3462: Vault's LDAP Auth Method Allows for User Enumeration
HashiCorp's Vault and Vault Enterprise are vulnerable to user enumeration when using the LDAP auth method. An attacker may submit requests of existent and non-existent LDAP users and observe the response from Vault to check if the account is valid on the LDAP server. This vulnerability is fixed in Vault 1.14.1 and 1.13.5.
Other sources
The Vault and Vault Enterprise (“Vault”) LDAP auth method allows unauthenticated users to potentially enumerate valid accounts in the configured LDAP system by observing the response error when querying usernames.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-3462?
CVE-2023-3462 is a vulnerability in HashiCorp's Vault and Vault Enterprise that allows user enumeration when using the LDAP auth method.
How does the vulnerability in CVE-2023-3462 work?
The vulnerability in CVE-2023-3462 allows an attacker to submit requests of existent and non-existent LDAP users to Vault and observe the response to check if the account is valid on the LDAP server.
What is the severity of CVE-2023-3462?
The severity of CVE-2023-3462 is medium with a CVSS score of 5.3.
How do I fix CVE-2023-3462?
To fix CVE-2023-3462, ensure you are using Vault version 1.14.1 or Vault version 1.13.5.
Where can I find more information about CVE-2023-3462?
You can find more information about CVE-2023-3462 on the HashiCorp discussion forum, NIST NVD, and GitHub advisory page.