{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "record": {
    "id": "CVE-2023-0665",
    "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2023-0665",
    "idYear": 2023,
    "status": "PUBLISHED",
    "publishedAt": "2023-03-30T00:21:47.676Z",
    "updatedAt": "2025-02-13T16:39:04.425Z",
    "importedAt": "2026-10-24T01:56:49.724Z",
    "snapshot": {
      "id": "cve_2026-10-24_midnight_baseline",
      "at": "2026-10-24T00:00:00.000Z",
      "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z"
    },
    "facts": {
      "title": "Vault PKI Issuer Endpoint Did Not Correctly Authorize Access to Issuer Metadata",
      "summary": "HashiCorp Vault's PKI mount issuer endpoints did not correctly authorize access to remove an issuer or modify issuer metadata, potentially resulting in denial of service of the PKI mount. This bug did not affect public or private key material, trust chains or certificate issuance. Fixed in Vault 1.13.1, 1.12.5, and 1.11.9.",
      "affected": [
        {
          "vendor": "HashiCorp",
          "product": "Vault",
          "platforms": [
            "Windows",
            "MacOS",
            "Linux",
            "x86",
            "ARM",
            "64 bit",
            "32 bit"
          ],
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "1.13.0",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "1.13.1"
            },
            {
              "version": "1.12.0",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "1.12.5"
            },
            {
              "version": "1.11.0",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "1.11.9"
            }
          ]
        },
        {
          "vendor": "HashiCorp",
          "product": "Vault Enterprise",
          "platforms": [
            "Windows",
            "MacOS",
            "Linux",
            "x86",
            "ARM",
            "64 bit",
            "32 bit"
          ],
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "1.13.0",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "1.13.1"
            },
            {
              "version": "1.12.0",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "1.12.5"
            },
            {
              "version": "1.11.0",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "1.11.9"
            }
          ]
        }
      ]
    }
  }
}