CVE-2024-7594: Vault SSH Secrets Engine Configuration Did Not Restrict Valid Principals By Default
Vault’s SSH secrets engine did not require the validprincipals list to contain a value by default. If the validprincipals and defaultuser fields of the SSH secrets engine configuration are not set, an SSH certificate requested by an authorized user to Vault’s SSH secrets engine could be used to authenticate as any user on the host. Fixed in Vault Community Edition 1.17.6, and in Vault Enterprise 1.17.6, 1.16.10, and 1.15.15.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-7594?
CVE-2024-7594 has been categorized as a high severity vulnerability due to insufficient restrictions on valid principals in the SSH secrets engine.
How do I fix CVE-2024-7594?
To fix CVE-2024-7594, ensure that the valid_principals and default_user fields are properly set in the SSH secrets engine configuration.
What versions are affected by CVE-2024-7594?
CVE-2024-7594 affects versions of Vault SSH secrets engine from 1.7.7 to 1.17.6, not including 1.17.6.
What does CVE-2024-7594 affect?
CVE-2024-7594 affects the SSH secrets engine in HashiCorp Vault, specifically its configuration for valid principals.
Who is at risk for CVE-2024-7594?
Users running affected versions of HashiCorp Vault without proper SSH secrets engine configuration are at risk of unauthorized access.