GHSA-qv95-g3gm-x542

Hashicorp Vault Privilege Escalation Vulnerability

Source: GitHub Advisory Database (reviewed) Low CVE-2021-41802

Packages

Ecosystem	Package	Affected	Fixed in
Go	github.com/hashicorp/vault	< 1.7.5	1.7.5
Go	github.com/hashicorp/vault	>= 1.8.0, < 1.8.4	1.8.4

Details

As written in the advisory (Markdown source, shown as plain text).

HashiCorp Vault and Vault Enterprise through 1.7.4 and 1.8.3 allowed a user with write permission to an entity alias ID sharing a mount accessor with another user to acquire this other user’s policies by merging their identities. Fixed in Vault and Vault Enterprise 1.7.5 and 1.8.4.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2021-41802 advisory
https://discuss.hashicorp.com/t/hcsec-2021-27-vault-merging-multiple-entity-aliases-for-the-same-mount-may-allow-privilege-escalation web
https://github.com/hashicorp/vault package
https://security.gentoo.org/glsa/202207-01 web