QID 379451

Vault is a tool for securely accessing secrets. A secret is anything that you want to tightly control access to, such as API keys, passwords, or certificates. Vault provides a unified interface to any secret while providing tight access control and recording a detailed audit log.

CVE-2024-2048: Vault and Vault Enterprise (Vault) TLS certificate auth method did not correctly validate client certificates when configured with a non-CA certificate as trusted certificate. In this configuration, an attacker may be able to craft a malicious certificate that could be used to bypass authentication.

Affected version(s):
HashiCorp Vault and Vault Enterprise prior to v1.14.10 and prior to v1.15.5

QID Detection Logic(Authenticated):
Linux: This QID fires vault --version command to detect the vulnerable version of Vault.

Successful exploitation of these vulnerabilities could lead to access of the vault data and leakage of the sensitive information protected by vault encryption.