← Back

CVE-2023-4680

nvd nist
Published: Sep 15, 2023Modified: Jun 17, 2026

JSON object

Loading...
6.8
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
Exploitability: 1.6 / Impact: 5.2
Source: NVD

Description

HashiCorp Vault and Vault Enterprise transit secrets engine allowed authorized users to specify arbitrary nonces, even with convergent encryption disabled. The encrypt endpoint, in combination with an offline attack, could be used to decrypt arbitrary ciphertext and potentially derive the authentication subkey when using transit secrets engine without convergent encryption. Introduced in 1.6.0 and fixed in 1.14.3, 1.13.7, and 1.12.11.

Affected (6)

Products: Hashicorp: Vault
Hashicorp
1 product
Vault
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Hashicorp
Vault
From 1.13.0 to 1.13.7
Vault
From 1.14.0 to 1.14.3
Vault
From 1.6.0 to 1.12.11
Vault
From 1.13.0 to 1.13.7
Vault
From 1.14.0 to 1.14.3
Vault
From 1.6.0 to 1.12.11

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
CWE-323
Reusing a Nonce, Key Pair in Encryption
Nonces should be used for the present occasion and only once.

References (2)

Source: security@hashicorp.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.