Riskcovery

CVE-2024-9180

Vault Operators in Root Namespace May Elevate Their Privileges

State
Published
Severity
7.2 High
Published
Oct 10, 2024
Updated
Nov 8, 2024
Reserved
Sep 25, 2024

Read the record on cve.org

Description

A privileged Vault operator with write permissions to the root namespace’s identity endpoint could escalate their own or another user’s privileges to Vault’s root policy. Fixed in Vault Community Edition 1.18.0 and Vault Enterprise 1.18.0, 1.17.7, 1.16.11, and 1.15.16.

Scores

CVSSScoreVectorSource
3.17.2 HighCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HHashiCorp

Weaknesses

  • CWE-266 Incorrect Privilege Assignment

Affected Products

ProductVersions
VaultHashiCorp
  • 0.10.4 to before 1.18.0Affected
Vault EnterpriseHashiCorp
  • 0.10.4 to before 1.18.0Affectedfrom 1.17.7Not affectedfrom 1.16.10Not affectedfrom 1.15.16Not affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.