CVE-2023-24999 | BDVDB-2026-197151 Detail

Description#

HashiCorp Vault and Vault Enterprise’s approle auth method allowed any authenticated user with access to an approle destroy endpoint to destroy the secret ID of any other role by providing the secret ID accessor. This vulnerability is fixed in Vault 1.13.0, 1.12.4, 1.11.8, 1.10.11 and above.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12023-03-10Record published in the CVE List.
2. Version 22025-03-03Most recent update recorded in the CVE List.