CVE-2022-41316
vault: insufficient certificate revocation list checking
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
HashiCorp Vault and Vault Enterprise’s TLS certificate auth method did not initially load the optionally configured CRL issued by the role's CA into memory on startup, resulting in the revocation list not being checked if the CRL has not yet been retrieved. Fixed in 1.12.0, 1.11.4, 1.10.7, and 1.9.10.
El método de autenticación de certificados TLS de HashiCorp Vault y Vault Enterprise no cargaba inicialmente la CRL configurada opcionalmente y emitida por la CA del rol en la memoria al iniciarse, resultando en que no se comprobara la lista de revocación si la CRL aún no era recuperada. Corregido en versiones 1.12.0, 1.11.4, 1.10.7 y 1.9.10
A flaw was found in HashiCorp Vault and Vault Enterprise. Vault’s TLS certificate auth method did not initially load the optionally-configured CRL issued by the role’s Certificate Authority (CA) into memory on startup, resulting in the revocation list not being checked if the CRL has not yet been retrieved.
Red Hat OpenShift Data Foundation is software-defined storage integrated with and optimized for the Red Hat OpenShift Container Platform. Red Hat OpenShift Data Foundation is a highly scalable, production-grade persistent storage for stateful applications running in the Red Hat OpenShift Container Platform. Issues addressed include bypass, denial of service, and remote SQL injection vulnerabilities.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2022-09-23 CVE Reserved
- 2022-10-12 CVE Published
- 2024-08-03 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-295: Improper Certificate Validation
CAPEC
References (5)
| URL | Tag | Source |
|---|---|---|
| https://security.netapp.com/advisory/ntap-20221201-0001 | Third Party Advisory |
|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Hashicorp Search vendor "Hashicorp" | Vault Search vendor "Hashicorp" for product "Vault" | < 1.9.10 Search vendor "Hashicorp" for product "Vault" and version " < 1.9.10" | - |
Affected
| ||||||
| Hashicorp Search vendor "Hashicorp" | Vault Search vendor "Hashicorp" for product "Vault" | < 1.9.10 Search vendor "Hashicorp" for product "Vault" and version " < 1.9.10" | enterprise |
Affected
| ||||||
| Hashicorp Search vendor "Hashicorp" | Vault Search vendor "Hashicorp" for product "Vault" | >= 1.10.0 < 1.10.7 Search vendor "Hashicorp" for product "Vault" and version " >= 1.10.0 < 1.10.7" | - |
Affected
| ||||||
| Hashicorp Search vendor "Hashicorp" | Vault Search vendor "Hashicorp" for product "Vault" | >= 1.10.0 < 1.10.7 Search vendor "Hashicorp" for product "Vault" and version " >= 1.10.0 < 1.10.7" | enterprise |
Affected
| ||||||
| Hashicorp Search vendor "Hashicorp" | Vault Search vendor "Hashicorp" for product "Vault" | >= 1.11.0 < 1.11.4 Search vendor "Hashicorp" for product "Vault" and version " >= 1.11.0 < 1.11.4" | - |
Affected
| ||||||
| Hashicorp Search vendor "Hashicorp" | Vault Search vendor "Hashicorp" for product "Vault" | >= 1.11.0 < 1.11.4 Search vendor "Hashicorp" for product "Vault" and version " >= 1.11.0 < 1.11.4" | enterprise |
Affected
| ||||||