CVE-2020-35453: HashiCorp Vault Enterprise’s Sentinel EGP policy feature incorrectly allowed requests to be processed in parent and sibling namespaces

Medium severity · published Dec 17, 2020

CVE-2020-35453

HashiCorp Vault Enterprise’s Sentinel EGP policy feature incorrectly allowed requests to be processed in parent and sibling namespaces

5.3

CVSS

0.8%

EPSS

On KEV

Description

HashiCorp Vault Enterprise’s Sentinel EGP policy feature incorrectly allowed requests to be processed in parent and sibling namespaces. Fixed in 1.5.6 and 1.6.1.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Attack vector

Network

Complexity

Low

Privileges

None

User interaction

None

Confidentiality

None

Integrity

Low

Availability

None

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)0.8% · higher than 57% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Vault · Hashicorp

1.5.0 before 1.5.6; 1.5.0 before 1.5.6; 1.6.0 before 1.6.1; 1.6.0 before 1.6.1 · source: NVD

Affected product

Vault

Hashicorp

All Vault CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2020-35453

CVE.org

https://www.cve.org/CVERecord?id=CVE-2020-35453

Vendor Advisory

https://discuss.hashicorp.com/t/hcsec-2020-24-vault-enterprise-s-sentinel-egp-policies-may-impact-parent-or-sibling-namespaces/18983

Release Notes

https://github.com/hashicorp/vault/blob/master/CHANGELOG.md#161