VULNERABILITY INTELLIGENCE

CVE-2023-5077

CVSS score7.6 HIGH
EPSS probability0.51%
CISA KEVNot currently listed
Published2023-09-29
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H

Description

The Vault and Vault Enterprise ("Vault") Google Cloud secrets engine did not preserve existing Google Cloud IAM Conditions upon creating or updating rolesets. Fixed in Vault 1.13.0.

Weakness classification

  • security@hashicorp.com: CWE-266
  • nvd@nist.gov: CWE-732

Primary references