VDB

CVE-2023-0665

CVE-2023-0665 PUBLISHED

HashiCorp Vault's PKI mount issuer endpoints did not correctly authorize access to remove an issuer or modify issuer metadata, potentially resulting in denial of service of the PKI mount. This bug did not affect public or private key material, trust chains or certificate issuance. Fixed in Vault 1.13.1, 1.12.5, and 1.11.9.

EPSS 0.10% · 27.3th percentile

Risk Scores

EPSS Score
0.10%
27.3th percentile

Affected Products

VendorProductVersions
Bitnamivault0, 1.12.0, 1.13.0
Bitnamivault1.12.0, 1.13.0, 0

Timeline

  • Mar 29, 2023 CVE Published
  • Mar 30, 2023 EPSS Score
  • May 7, 2023 EPSS Score
  • Jun 14, 2023 EPSS Score
  • Jul 23, 2023 EPSS Score
  • Aug 30, 2023 EPSS Score
  • Oct 7, 2023 EPSS Score
  • Nov 14, 2023 EPSS Score
  • Dec 22, 2023 EPSS Score
  • Jan 29, 2024 EPSS Score
  • Mar 8, 2024 EPSS Score
  • Apr 15, 2024 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›