← CVE Intelligence

CVE-2024-2660

Vault TLS Cert Auth Method Did Not Correctly Validate OCSP Responses PUBLISHED

Description (CNA)

Vault and Vault Enterprise TLS certificates auth method did not correctly validate OCSP responses when one or more OCSP sources were configured. This vulnerability, CVE-2024-2660, affects Vault and Vault Enterprise 1.14.0 and above, and is fixed in Vault 1.16.0 and Vault Enterprise 1.16.1, 1.15.7, and 1.14.11.

Affected (CNA)

Vendor / productVersions
HashiCorp / Vaultaffected 1.14.0 before 1.16.0
HashiCorp / Vault Enterpriseaffected 1.14.0 before 1.16.0

CWE

CWE-636

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.