VULNERABILITY INTELLIGENCE

CVE-2023-4680

CVSS score6.8 MEDIUM
EPSS probability0.44%
CISA KEVNot currently listed
Published2023-09-15
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Description

HashiCorp Vault and Vault Enterprise transit secrets engine allowed authorized users to specify arbitrary nonces, even with convergent encryption disabled. The encrypt endpoint, in combination with an offline attack, could be used to decrypt arbitrary ciphertext and potentially derive the authentication subkey when using transit secrets engine without convergent encryption. Introduced in 1.6.0 and fixed in 1.14.3, 1.13.7, and 1.12.11.

Weakness classification

  • security@hashicorp.com: CWE-323
  • nvd@nist.gov: CWE-20

Primary references