VDB
CVE-2023-24999
CVE-2023-24999
PUBLISHED
HashiCorp Vault and Vault Enterprise’s approle auth method allowed any authenticated user with access to an approle destroy endpoint to destroy the secret ID of any other role by providing the secret ID accessor. This vulnerability is fixed in Vault 1.13.0, 1.12.4, 1.11.8, 1.10.11 and above.
EPSS 0.18% · 39.5th percentile
Risk Scores
EPSS Score
0.18%
39.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | vault | 1.11.0, 1.12.0, 0 |
| Bitnami | vault | 0, 1.11.0, 1.12.0 |
Timeline
- Mar 10, 2023 CVE Published
- Mar 11, 2023 EPSS Score
- Mar 11, 2023 PoC Published
- Apr 19, 2023 EPSS Score
- May 28, 2023 EPSS Score
- Jul 5, 2023 EPSS Score
- Aug 13, 2023 EPSS Score
- Sep 21, 2023 EPSS Score
- Oct 30, 2023 EPSS Score
- Dec 7, 2023 EPSS Score
- Jan 15, 2024 EPSS Score
- Feb 23, 2024 EPSS Score