CVE-2023-25000
Medium
Description
HashiCorp Vault's implementation of Shamir's secret sharing used precomputed table lookups, and was vulnerable to cache-timing attacks. An attacker with access to, and the ability to observe a large number of unseal operations on the host through a side channel may reduce the search space of a brute force effort to recover the Shamir shares. Fixed in Vault 1.13.1, 1.12.5, and 1.11.9.
SeverityMedium
CVSS5.0
Exploit probability—
Product
Hashicorp Vault
PublishedMar 30, 2023
First seenMar 30, 2023
Weakness typeCWE-208CWE-208
How to fix
Update
- hashicorp vault1.11.9, 1.12.5, 1.13.1 or later
- github.com/hashicorp/vault1.11.9, 1.12.5, 1.13.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hashicorp vault | v < 1.11.9, 1.12.0 ≤ v < 1.12.5, 1.13.0 ≤ v < 1.13.1 | 1.11.9, 1.12.5, 1.13.1 |
| github.com/hashicorp/vaultGo | v < 1.11.9, 1.12.0 ≤ v < 1.12.5, 1.13.0 ≤ v < 1.13.1 | 1.11.9, 1.12.5, 1.13.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.