CVE-2022-30689
Medium
Published: 17 May 2022
Published
17 May 2022
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1
5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
EPSS Score
0.0036
58.5th percentile
Risk Priority
11
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2022-30689 is a medium-severity an unspecified weakness vulnerability in Hashicorp Vault. Its CVSS base score is 5.3 (Medium).
Operationally, ranked in the top 41.5% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-3515
Vulnerability details
HashiCorp Vault and Vault Enterprise from 1.10.0 to 1.10.2 did not correctly configure and enforce MFA on login after server restarts. This affects the Login MFA feature introduced in Vault and Vault Enterprise 1.10.0 and does not affect the separate…
more
Enterprise MFA feature set. Fixed in 1.10.3.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
hashicorp
vault
1.10.0 — 1.10.3 · 1.10.0 — 1.10.3
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.