Home

Description

Vault Community, Vault Enterprise (“Vault”) Azure Auth method did not correctly validate the claims in the Azure-issued token, resulting in the potential bypass of the bound_locations parameter on login. Fixed in Vault Community Edition 1.19.1 and Vault Enterprise 1.19.1, 1.18.7, 1.17.14, 1.16.18.

PUBLISHED Reserved 2025-04-22 | Published 2025-05-02 | Updated 2025-05-02 | Assigner HashiCorp




MEDIUM: 6.6CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Problem types

CWE-863: Incorrect Authorization

Product status

Default status
unaffected

0.10.0 (semver) before 1.19.1
affected

Default status
unaffected

0.10.0 (semver) before 1.19.1
affected

References

discuss.hashicorp.com/...on-could-be-bypassed-on-login/74716

cve.org (CVE-2025-3879)

nvd.nist.gov (CVE-2025-3879)

Download JSON