UpHeron
All vulnerabilities

Servers and applications

CVE-2023-3775

A Vault Enterprise Sentinel Role Governing Policy created by an operator to restrict access to resources in one namespace can be applied to requests outside in another non-descendant namespace, potentially resulting in denial of service. Fixed in Vault Enterprise 1.15.0, 1.14.4, 1.13.8.

Severity
Medium 4.9
Published
29 Sept 2023
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
1.13.8, 1.14.4
Sources
NVD

Affected software

SoftwareAffected versions
HashiCorp VaultServers and applications · cpe:a:hashicorp:vault
  • From 0.11.0 before 1.13.8
  • From 1.14.0 before 1.14.4

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-3775
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-3775