Low WID-SEC-2025-1400 1 CVE

Hashicorp Vault: Schwachstelle ermöglicht Denial of Service

Published Jun 25, 2025 · Updated Jun 25, 2025 · de-DE

Vendor: HashiCorp Product: Vault Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Hashicorp Vault ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

Vault ist ein identitätsbasiertes System zur Verwaltung von Geheimnissen und Verschlüsselung.

Vulnerabilities 1

Low 3.1

CVE-2025-4656

Vault Vulnerable to Recovery Key Cancellation Denial of Service

Vault Community and Vault Enterprise rekey and recovery key operations can lead to a denial of service due to uncontrolled cancellation by a Vault operator. This vulnerability (CVE-2025-4656) has been remediated in Vault Community Edition 1.20.0 and Vault Ent…

HashiCorp Vault Enterprise Vault splunk-otel-collector Wolfi Go

Jun 25, 2025

Revision history

2025-06-25 #1
Initiale Fassung

References

Hashicorp Security Advisory vom 2025-06-25
https://discuss.hashicorp.com/t/hcsec-2025-11-vault-vulnerable-to-recovery-key-cancellation-denial-of-service/75570
Red Hat Bugzilla vom 2025-06-25
https://bugzilla.redhat.com/show_bug.cgi?id=2374792
NIST CVE-2025-4656
https://nvd.nist.gov/vuln/detail/CVE-2025-4656