CyberRota Analysis
This is a low severity vulnerability with a CVSS score of 2.5. It affects Oracle.
CVE
CVE-2023-2197
Severity
LOW
CVSS
2.5
EPSS
0.09%
Oracle
Original NVD Description
HashiCorp Vault Enterprise 1.13.0 up to 1.13.1 is vulnerable to a padding oracle attack when using an HSM in conjunction with the CKM_AES_CBC_PAD or CKM_AES_CBC encryption mechanisms. An attacker with privileges to modify storage and restart Vault may be able to intercept or modify cipher text in order to derive Vault’s root key. Fixed in 1.13.2
Related CVEs
Other vulnerabilities affecting the same vendor(s)