Vulnerability Description
HashiCorp Vault and Vault Enterprise transit secrets engine allowed authorized users to specify arbitrary nonces, even with convergent encryption disabled. The encrypt endpoint, in combination with an offline attack, could be used to decrypt arbitrary ciphertext and potentially derive the authentication subkey when using transit secrets engine without convergent encryption. Introduced in 1.6.0 and fixed in 1.14.3, 1.13.7, and 1.12.11.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Hashicorp | Vault | >= 1.6.0, < 1.12.11 |
Related Weaknesses (CWE)
References
- https://discuss.hashicorp.com/t/hcsec-2023-28-vault-s-transit-secrets-engine-allVendor Advisory
- https://discuss.hashicorp.com/t/hcsec-2023-28-vault-s-transit-secrets-engine-allVendor Advisory
FAQ
What is CVE-2023-4680?
CVE-2023-4680 is a vulnerability with a CVSS score of 6.8 (MEDIUM). HashiCorp Vault and Vault Enterprise transit secrets engine allowed authorized users to specify arbitrary nonces, even with convergent encryption disabled. The encrypt endpoint, in combination with an...
How severe is CVE-2023-4680?
CVE-2023-4680 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-4680?
Check the references section above for vendor advisories and patch information. Affected products include: Hashicorp Vault.