Permissions, Privileges, and Access Controls in Vault Enterprise and Vault - CVE-2022-40186

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU67534

Permissions, Privileges, and Access Controls in Vault Enterprise and Vault - CVE-2022-40186

Published: September 21, 2022


Vulnerability identifier: #VU67534
CSH Severity: Low
CVSS v4: 2.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-40186
CWE-ID: CWE-264
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to gain access to potentially sensitive information.

The vulnerability exists due to the application permits usage of entity aliases mapped to a single entity share with the same alias name. A local user can create a share with the same alias name as used by another user and wait for the other user to login. After the victim logs in, the attacker will be able to gain access to files metadata in the victim's share.

Successful exploitation of the vulnerability requires that templated ACL policy is enabled and that the policy uses alias.Name, which is derived from the alias name.


Affected software

Vault Enterprise
Vault
IBM Cloud Pak for Watson AIOps
OpenShift Data Foundation (formerly OpenShift Container Storage)

How to mitigate CVE-2022-40186

Install updates from vendor's website.

Vault Enterprise - addressed in versions 1.9.9, 1.10.6, 1.11.3
Vault - addressed in versions 1.9.9, 1.10.6, 1.11.3
IBM Cloud Pak for Watson AIOps - update to 3.5.1
OpenShift Data Foundation (formerly OpenShift Container Storage) - update to 4.11.7

External References

Related Security Bulletins