CVE-2023-0620 - CVE House

Back to Database

Status published Medium CVE-2023-0620

Vault Vulnerable to SQL Injection When Configuring the Microsoft SQL Database Storage Backend

6.5 CVSS

Vulnerability Description

HashiCorp Vault and Vault Enterprise versions 0.8.0 through 1.13.1 are vulnerable to an SQL injection attack when configuring the Microsoft SQL (MSSQL) Database Storage Backend. When configuring the MSSQL plugin through the local, certain parameters are not sanitized when passed to the user-provided MSSQL database. An attacker may modify these parameters to execute a malicious SQL command. This issue is fixed in versions 1.13.1, 1.12.5, and 1.11.9.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-0620

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

Yuval Ostrovsky, Gal Goldshtein, Daniel Abeles of Oxeye

References

More from HashiCorp

View All →

HashiCorp go-getter Vulnerable to Arbitrary Read through Symlink Attack

Vault unauthenticated denial of service through complex json payload

Vault Certificate Auth Method Did Not Validate Common Name For Non-CA Certificates

Vault Login MFA Bypass of Rate Limiting and TOTP Code Reuse

Vault TOTP Secrets Engine Code Reuse

Affected Vendor

HashiCorp

View all reports →

Affected Software

Vault, Vault Enterprise

Vulnerable Versions:

1.13.0, 1.12.0, 0.8.0

Timeline

Official Publish: March 30th, 2023

Last Modified: February 13th, 2025

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application

T1059 Command and Scripting Interpreter

T1213.006 Databases

T1485 Data Destruction