# HCSEC-2020-18 - Vault SSH Helper Validated IP Addresses Incorrectly

**URL:** <https://discuss.hashicorp.com/t/hcsec-2020-18-vault-ssh-helper-validated-ip-addresses-incorrectly/18103>\
**Category:** Security\
**Tags:** security-vault\
**Created:** [November 25, 2020, 8:26pm UTC](https://discuss.hashicorp.com/t/hcsec-2020-18-vault-ssh-helper-validated-ip-addresses-incorrectly/18103 "2020-11-25T20:26:04Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![jfinnigan](https://sea2.discourse-cdn.com/hashicorp/user_avatar/discuss.hashicorp.com/jfinnigan/32/3834_2.png) [@jfinnigan](https://discuss.hashicorp.com/u/jfinnigan)\
**Post date:** [November 25, 2020, 8:26pm UTC](https://discuss.hashicorp.com/t/hcsec-2020-18-vault-ssh-helper-validated-ip-addresses-incorrectly/18103/1 "2020-11-25T20:26:05Z")

</div>

**Bulletin ID:** HCSEC-2020-18  
**Affected Products / Versions:** vault-ssh-helper up to 0.1.6; fixed in 0.1.7.  
**Publication Date:** 19 August, 2020

**Summary**  
vault-ssh-helper up to and including version 0.1.6 incorrectly accepted Vault-issued SSH OTPs for the subnet in which a host’s network interface was located, rather than the specific IP address assigned to that interface. Assigned CVE-2020-24359 and fixed in 0.1.7.

**Background**  
[vault-ssh-helper](https://github.com/hashicorp/vault-ssh-helper) is a counterpart to [HashiCorp Vault’s](https://github.com/hashicorp/vault) SSH backend. It allows a machine to consume One-Time-Passwords (OTP) created by Vault servers by allowing them to be used as client authentication credentials at SSH connection time.

**Details**  
It was observed that vault-ssh-helper incorrectly accepted Vault-issued SSH OTPs for the subnet in which a host’s network interface was located, rather than the specific IP address assigned to that interface

**Remediation**  
Upgrade to vault-ssh-helper 0.1.7 or newer.

**Acknowledgement**  
This issue was identified by an external party who reported it to HashiCorp.

_We deeply appreciate any effort to discover and disclose security vulnerabilities responsibly. For information about security at HashiCorp and the reporting of security vulnerabilities, please see [https://hashicorp.com/security](https://hashicorp.com/security)._