{"id":"GO-2025-4152","revision":"8f916bf83bad49abb70374d403c1f8e3","records":[{"revision":"8f916bf83bad49abb70374d403c1f8e3","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2025-4152","aliases":["CVE-2025-13357","GHSA-gmm6-j2g5-r52m"],"title":"Vault’s Terraform Provider incorrectly set default deny_null_bind parameter for LDAP auth method to false by default in github.com/hashicorp/terraform-provider-vault","description":"Vault’s Terraform Provider incorrectly set default deny_null_bind parameter for LDAP auth method to false by default in github.com/hashicorp/terraform-provider-vault.\n\nNOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions.\n\n(If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.)\n\nThe additional affected modules and versions are: github.com/hashicorp/terraform-provider-vault before v5.5.0.","state":0,"publishedAt":"2025-11-25T18:12:18+00:00","modifiedAt":"2025-11-25T18:57:23.238876+00:00","affected":[{"ecosystem":"Go","name":"github.com/hashicorp/terraform-provider-vault","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/advisories/GHSA-gmm6-j2g5-r52m","https://nvd.nist.gov/vuln/detail/CVE-2025-13357","https://github.com/hashicorp/terraform-provider-vault/commit/882bc7f409acc99c872c345edd65159d9568589a","https://github.com/hashicorp/terraform-provider-vault/pull/2622","https://discuss.hashicorp.com/t/hcsec-2025-33-vault-terraform-provider-applied-incorrect-defaults-for-ldap-auth-method/76822","https://github.com/hashicorp/terraform-provider-vault/releases/tag/v5.5.0"],"sourceUrl":"https://osv.dev/vulnerability/GO-2025-4152","license":"OSV · upstream source license applies","key":"osv:GO-2025-4152","identifiers":["GO-2025-4152","CVE-2025-13357","GHSA-gmm6-j2g5-r52m"]},"retained":false,"historicalAffected":[]}],"coverage":[]}