title: Vault Cert Auth Method Did Not Correctly Validate Non-CA Certificates
description: Vault and Vault Enterprise (“Vault”) TLS certificate auth method did not correctly validate client certificates when configured with a non-CA certificate as trusted certificate. In this configuration, an attacker may be able to craft a malicious certificate that could be used to bypass authentication. Fixed in Vault 1.15.5 and 1.14.10.
problem types: CWE-295: Improper Certificate Validation
affected:
{
defaultStatus: unaffected
platforms: [64 bit, 32 bit, x86, ARM, MacOS, Windows, Linux]
product: Vault
repo: https://github.com/hashicorp/vault
vendor: HashiCorp
versions:
changes: [at: 1.14.10, status: unaffected], lessThan: 1.16.0, status: affected, version: 1.15.5, versionType: semver
}
{
defaultStatus: unaffected
platforms: [64 bit, 32 bit, x86, ARM, MacOS, Windows, Linux]
product: Vault Enterprise
repo: https://github.com/hashicorp/vault
vendor: HashiCorp
versions:
changes: [at: 1.14.10, status: unaffected], lessThan: 1.16.0, status: affected, version: 1.15.5, versionType: semver
}
metrics:
cvssV3_1: [
baseScore: 8.1
baseSeverity: HIGH
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL