CVE-2023-0665 — Vulnetix

Try Vulnetix Request Demo

CVE-2023-0665 PUBLISHED

HashiCorp Vault's PKI mount issuer endpoints did not correctly authorize access to remove an issuer or modify issuer metadata, potentially resulting in denial of service of the PKI mount. This bug did not affect public or private key material, trust chains or certificate issuance. Fixed in Vault 1.13.1, 1.12.5, and 1.11.9.

EPSS 0.08% · 24.5th percentile

Risk Scores

EPSS Score

0.08%

24.5th percentile

Affected Products

Vendor	Product	Versions
Bitnami	vault	0, 1.12.0, 1.13.0
Bitnami	vault	0, 1.12.0, 1.13.0

Timeline

Mar 29, 2023 CVE Published
Mar 30, 2023 EPSS Score
May 7, 2023 EPSS Score
Jun 13, 2023 EPSS Score
Jul 21, 2023 EPSS Score
Aug 27, 2023 EPSS Score
Oct 4, 2023 EPSS Score
Nov 11, 2023 EPSS Score
Dec 18, 2023 EPSS Score
Jan 25, 2024 EPSS Score
Mar 2, 2024 EPSS Score
Apr 9, 2024 EPSS Score

References

Open in Interactive Console →