CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.4. See the original NVD description below for full technical details.
CVE
CVE-2025-13357
Severity
HIGH
CVSS
7.4
EPSS
0.54%
Original NVD Description
Vault’s Terraform Provider incorrectly set the default deny_null_bind parameter for the LDAP auth method to false by default, potentially resulting in an insecure configuration. If the underlying LDAP server allowed anonymous or unauthenticated binds, this could result in authentication bypass. This vulnerability, CVE-2025-13357, is fixed in Vault Terraform Provider v5.5.0.
Related CVEs
Other vulnerabilities affecting the same vendor(s)