SB2024092732 - Improper authentication in HashiCorp Vault SSH Secrets Engine
Published: September 27, 2024
Security Bulletin ID
SB2024092732
Severity
Medium
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Data manipulation
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Improper authentication (CVE-ID: CVE-2024-7594)
The vulnerability allows a remote user to escalate privileges on the system.
The vulnerability exists due to Vault’s SSH secrets engine did not require the valid_principals list to contain a value by default. If the valid_principals and default_user fields of the SSH secrets engine configuration are not set, an SSH certificate requested by an authorized user to Vault’s SSH secrets engine could be used to authenticate as any user on the host.
Remediation
Install update from vendor's website.