{
"id": "GHSA-qv95-g3gm-x542",
"aliases": [
"CVE-2021-41802"
],
"details": "HashiCorp Vault and Vault Enterprise through 1.7.4 and 1.8.3 allowed a user with write permission to an entity alias ID sharing a mount accessor with another user to acquire this other user’s policies by merging their identities. Fixed in Vault and Vault Enterprise 1.7.5 and 1.8.4.",
"summary": "Hashicorp Vault Privilege Escalation Vulnerability",
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.7.5"
}
]
}
],
"package": {
"name": "github.com/hashicorp/vault",
"ecosystem": "Go"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "1.8.0"
},
{
"fixed": "1.8.4"
}
]
}
],
"package": {
"name": "github.com/hashicorp/vault",
"ecosystem": "Go"
}
}
],
"modified": "2022-08-10T23:49:29Z",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:C/C:L/I:N/A:N"
}
],
"published": "2021-10-12T16:39:01Z",
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41802",
"type": "ADVISORY"
},
{
"url": "https://discuss.hashicorp.com/t/hcsec-2021-27-vault-merging-multiple-entity-aliases-for-the-same-mount-may-allow-privilege-escalation",
"type": "WEB"
},
{
"url": "https://github.com/hashicorp/vault",
"type": "PACKAGE"
},
{
"url": "https://security.gentoo.org/glsa/202207-01",
"type": "WEB"
}
],
"schema_version": "1.4.0",
"database_specific": {
"cwe_ids": [
"CWE-269",
"CWE-732"
],
"severity": "LOW",
"github_reviewed": true,
"nvd_published_at": "2021-10-08T17:15:00Z",
"github_reviewed_at": "2021-10-11T18:57:45Z"
}
}