title: Vault's Transit Secrets Engine Allowed Nonce Specified without Convergent Encryption
description: HashiCorp Vault and Vault Enterprise transit secrets engine allowed authorized users to specify arbitrary nonces, even with convergent encryption disabled. The encrypt endpoint, in combination with an offline attack, could be used to decrypt arbitrary ciphertext and potentially derive the authentication subkey when using transit secrets engine without convergent encryption. Introduced in 1.6.0 and fixed in 1.14.3, 1.13.7, and 1.12.11.
problem types: CWE-20: Improper Input Validation
affected:
{
vendor: HashiCorp
product: Vault
platforms: [Windows, MacOS, Linux, x86, ARM, 64 bit, 32 bit]
versions:
lessThan: 1.14.3, status: affected, version: 1.14.0, versionType: semver
lessThan: 1.13.7, status: affected, version: 1.13.0, versionType: semver
lessThan: 1.12.11, status: affected, version: 1.12.0, versionType: semver
lessThan: 1.12.0, status: affected, version: 1.6.0, versionType: semver
defaultStatus: unaffected
}
{
vendor: HashiCorp
product: Vault Enterprise
platforms: [Windows, MacOS, Linux, x86, ARM, 64 bit, 32 bit]
versions:
lessThan: 1.14.3, status: affected, version: 1.14.0, versionType: semver
lessThan: 1.13.7, status: affected, version: 1.13.0, versionType: semver
lessThan: 1.12.11, status: affected, version: 1.12.0, versionType: semver
lessThan: 1.12.0, status: affected, version: 1.6.0, versionType: semver
defaultStatus: unaffected
}
metrics:
format: CVSS
scenarios: GENERAL
cvssV3_1: [
version: 3.1
attackVector: NETWORK
attackComplexity: HIGH
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: NONE
baseSeverity: MEDIUM
baseScore: 6.8
vectorString: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
]