Aller au contenu
en Se connecter
2.1 Faible

CVE-2026-115369 OpenBao from 2.5.0 before 2.6.2 fails to enforce the PKI role allowed_ip_sans_cidr restriction on IP SANs taken from a…

Description

OpenBao from 2.5.0 before 2.6.2 fails to enforce the PKI role allowed_ip_sans_cidr restriction on IP SANs taken from a CSR when use_csr_sans is enabled. Authenticated callers with sign permission can submit a CSR with an out-of-range IP SAN to pki/sign/<role> and obtain CA-signed certificates for unauthorized IPs.

Produits et versions touchés

Produit Versions touchées Corrigé en
openbao 2.6 premières → < 2.6.2 2.6.2
openbao 2.5 2.5.0 → < 2.6.2 2.6.2

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de openbao

Les 43 CVE de openbao →
CVE-2026-115365 OpenBao 2.3.0 before 2.6.3 Incorrect Authorization via Policy Cache Namespace Traversal 7.5 Élevée CVE-2026-115366 OpenBao from 2.3.0 before 2.6.3 contains an improper authorization vulnerability that allows privileged… 2.0 Faible CVE-2026-115364 OpenBao before 2.6.3 contains a missing authorization check that allows attackers to stop Agent and Proxy services by… 2.1 Faible CVE-2026-115363 OpenBao 2.2.0 before 2.6.4 and 2.7.0 before 2.7.1 contains an information disclosure vulnerability that exposes the… 2.1 Faible
Suivre cette CVE