[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fr7ChAe79oJ6Gv3U9gX5G_6olrYCi0BO5mZpO_4i9H2s":3,"g5a-risk:CVE-2022-36129":118},{"success":4,"data":5,"meta":115},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":30,"epssPercentile":27,"epssTimeSeries":31,"severity":32,"affectedProducts":33,"affectedProductsCount":42,"references":43,"referencesCount":56,"weaknesses":57,"weaknessesCount":66,"isActivelyExploited":67,"cisaInfo":27,"otxData":27,"relatedBlogPosts":68,"seoMetadata":69,"configurations":94,"relatedVendorCves":113,"notableEvents":114},"CVE-2022-36129","What is CVE-2022-36129?","HashiCorp Vault Enterprise 1.7.0 through 1.9.7, 1.10.4, and 1.11.0 clusters using Integrated Storage expose an unauthenticated API endpoint that could be abused to override the voter status of a node within a Vault HA cluster, introducing potential for future data loss or catastrophic failure. Fixed in Vault Enterprise 1.9.8, 1.10.5, and 1.11.1.","HashiCorp Vault Enterprise 1.7.0 through 1.9.7, 1.10.4, and 1.11.0 clusters using Integrated Storage expose an unauthenticated API endpoint that could be abu...","2022-07-26T23:15:08.337","2023-08-08T14:22:24.967",9.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":27,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.2,0.01633,[30,30,30,30,30,30,30],"Critical",[34,39],{"vendor":35,"product":36,"version":37,"criteria":38,"vulnerable":4},"hashicorp","vault","*","cpe:2.3:a:hashicorp:vault:*:*:*:*:*:*:*:*",{"vendor":35,"product":36,"version":40,"criteria":41,"vulnerable":4},"1.11.0","cpe:2.3:a:hashicorp:vault:1.11.0:*:*:*:-:*:*:*",2,[44,49,52],{"url":45,"source":46,"tags":47},"https:\u002F\u002Fdiscuss.hashicorp.com","Hashicorp",[48],"Vendor Advisory",{"url":50,"source":46,"tags":51},"https:\u002F\u002Fdiscuss.hashicorp.com\u002Ft\u002Fhcsec-2022-15-vault-enterprise-does-not-verify-existing-voter-status-when-joining-an-integrated-storage-ha-node\u002F42420",[48],{"url":53,"source":54,"tags":55},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20220901-0011\u002F","Netapp",[],3,[58],{"id":59,"name":60,"description":61,"extendedDescription":62,"status":63,"abstraction":64,"structure":65},"CWE-306","Missing Authentication for Critical Function","The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.","","Draft","Base","Simple",1,false,[],{"title":70,"metaDescription":71,"keywords":72,"canonicalUrl":73,"structuredData":74},"What is CVE-2022-36129? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-36129, a critical severity cyber security vulnerability from 2022. HashiCorp Vault Enterprise 1.7.0 through 1.9.7, 1.10.4,...","CVE-2022-36129, CVE-2022-36129 vulnerability, CVE-2022-36129 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, hashicorp security, vault vulnerability","\u002Fwhat-is\u002Fcve-2022-36129",{"@context":75,"@type":76,"headline":70,"description":71,"datePublished":10,"dateModified":11,"author":77,"publisher":81,"about":85,"mainEntityOfPage":89,"articleSection":92,"keywords":93},"https:\u002F\u002Fschema.org","TechArticle",{"@type":78,"name":79,"url":80},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":78,"name":79,"url":80,"logo":82},{"@type":83,"url":84},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":86,"name":6,"description":87,"additionalType":88},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":90,"@id":91},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-36129","Cybersecurity","CVE-2022-36129, CVE-2022-36129 vulnerability, CVE-2022-36129 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[95],{"Operator":27,"Negate":27,"Nodes":96},[97],{"Operator":98,"Negate":27,"CPEMatch":99},"OR",[100,104,108,110],{"Vulnerable":4,"Criteria":38,"MatchCriteriaID":101,"VersionStartExcluding":27,"VersionStartIncluding":102,"VersionEndExcluding":27,"VersionEndIncluding":103},"C61A9B98-537D-4B3E-B8DB-2B745F194602","1.7.0","1.9.7",{"Vulnerable":4,"Criteria":38,"MatchCriteriaID":105,"VersionStartExcluding":27,"VersionStartIncluding":106,"VersionEndExcluding":27,"VersionEndIncluding":107},"8BF15D42-012D-42E2-94A8-41CB79AA1630","1.10.0","1.10.4",{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":109,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"5374E2F4-F912-461D-A59B-1C5D474EB1FB",{"Vulnerable":4,"Criteria":111,"MatchCriteriaID":112,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:hashicorp:vault:1.11.0:*:*:*:enterprise:*:*:*","DD2B7644-DDE6-46EA-BF39-3DD2087AD9E4",[],[],{"lastModified":11,"cacheTime":116,"version":117},1792439775264,"2.0",{"score":119,"band":120,"action":121,"scoredAt":122},54,"Medium","Plan remediation","2026-10-16T06:55:14.550406+00:00"]