PT-2023-26086 · Hashicorp · Vault Enterprise

CVE-2023-3774

·

Publicado

2023-07-28

·

Atualizado

2024-09-26

CVSS v3.1

4.9

Média

VetorAV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Vault Enterprise versions prior to 1.14.1 Vault Enterprise versions prior to 1.13.5 Vault Enterprise versions prior to 1.12.9
Description An unhandled error in Vault Enterprise's namespace creation may cause the Vault process to crash, potentially resulting in denial of service.
Recommendations For versions prior to 1.14.1, update to version 1.14.1 or later. For versions prior to 1.13.5, update to version 1.13.5 or later. For versions prior to 1.12.9, update to version 1.12.9 or later.

Exploit

Correção

DoS

Improper Handling of Exceptional Conditions

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BIT-VAULT-2023-3774
CVE-2023-3774

Produtos afetados

Vault Enterprise