CVE-2023-3775: Vault Enterprise's Sentinel RGP Policies Allowed For Cross-Namespace Denial of Service
First published: Thu Sep 28 2023(Updated: )
A Vault Enterprise Sentinel Role Governing Policy created by an operator to restrict access to resources in one namespace can be applied to requests outside in another non-descendant namespace, potentially resulting in denial of service. Fixed in Vault Enterprise 1.15.0, 1.14.4, 1.13.8.
Credit: security@hashicorp.com security@hashicorp.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| HashiCorp Vault | >=0.11.0<1.13.8 | |
| HashiCorp Vault | >=1.14.0<1.14.4 | |
| redhat/Vault Enterprise | <1.15.0 | 1.15.0 |
| redhat/and | <1.13.8 | 1.13.8 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://discuss.hashicorp.com/t/hcsec-2023-29-vault-enterprise-s-sentinel-rgp-policies-allowed-for-cross-namespace-denial-of-service/58653
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2241306#c0
- https://access.redhat.com/errata/RHSA-2024:3718
- https://bugzilla.redhat.com/show_bug.cgi?id=2241306
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-3775.
What is the severity of CVE-2023-3775?
The severity of CVE-2023-3775 is medium with a CVSS score of 4.2.
Which version of Vault Enterprise is affected by CVE-2023-3775?
Vault Enterprise versions between 0.11.0 and 1.13.8, as well as versions between 1.14.0 and 1.14.4, are affected by CVE-2023-3775.
How can I fix CVE-2023-3775?
To fix CVE-2023-3775, update your Vault Enterprise installation to version 1.15.0, 1.14.4, or 1.13.8.
Where can I find more information about CVE-2023-3775?
You can find more information about CVE-2023-3775 in the following reference: [link](https://discuss.hashicorp.com/t/hcsec-2023-29-vault-enterprise-s-sentinel-rgp-policies-allowed-for-cross-namespace-denial-of-service/58653)
- collector/nvd-index
- agent/author
- agent/type
- agent/title
- agent/first-publish-date
- agent/event
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/weakness
- collector/mitre-cve
- source/MITRE
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2023-3775
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/description
- agent/trending
- vendor/hashicorp
- canonical/hashicorp vault
- version/hashicorp vault/0.11.0
- version/hashicorp vault/1.14.0
- package-manager/redhat