Insufficient Session Expiration in Vault Enterprise and Vault - CVE-2021-32923
Published: August 4, 2022
Vulnerability identifier: #VU66113
CSH Severity: Medium
CVSS v4: 9.1 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-32923
CWE-ID: CWE-613
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to gain access to sensitive information.
The vulnerability exists due to application allows the renewal of nearly-expired token leases and dynamic secret leases (specifically, those within 1 second of their maximum TTL), which caused them to be incorrectly treated as non-expiring during subsequent use. A remote non-authenticated attacker can obtain or guess session token and gain unauthorized access to session that belongs to another user.
Affected software
Vault Enterprise
Vault
Gentoo Linux
Vault
Gentoo Linux
How to mitigate CVE-2021-32923
Install updates from vendor's website.
Vault Enterprise - addressed in versions 1.5.9, 1.6.5, 1.7.2
Vault - addressed in versions 1.5.9, 1.6.5, 1.7.2
Vault - addressed in versions 1.5.9, 1.6.5, 1.7.2