VDB
CVE-2023-0665
CVE-2023-0665
PUBLISHED
CVSS 6.5 MEDIUM
HashiCorp Vault's PKI mount issuer endpoints did not correctly authorize access to remove an issuer or modify issuer metadata, potentially resulting in denial of service of the PKI mount. This bug did not affect public or private key material, trust chains or certificate issuance. Fixed in Vault 1.13.1, 1.12.5, and 1.11.9.
EPSS 0.33% · 24.0th percentile
Risk Scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
EPSS Score
0.33%
24.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | vault | 0, 1.12.0, 1.13.0 |
| Bitnami | vault | 1.12.0, 1.13.0, 0 |
Timeline
- Mar 29, 2023 CVE Published
- Mar 30, 2023 EPSS Score
- May 8, 2023 EPSS Score
- Jun 15, 2023 EPSS Score
- Jul 24, 2023 EPSS Score
- Aug 31, 2023 EPSS Score
- Oct 9, 2023 EPSS Score
- Nov 17, 2023 EPSS Score
- Dec 25, 2023 EPSS Score
- Feb 2, 2024 EPSS Score
- Mar 11, 2024 EPSS Score
- Apr 19, 2024 EPSS Score