Описание
Vault and Vault Enterprise (“Vault”) may expose sensitive information when enabling an audit device which specifies the log_raw option, which may log sensitive information to other audit devices, regardless of whether they are configured to use log_raw.
Ссылки
- ExploitVendor Advisory
- Vendor Advisory
- ExploitVendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 1.15.0 (включая) до 1.15.5 (исключая)Версия от 1.15.0 (включая) до 1.15.5 (исключая)
Одно из
cpe:2.3:a:hashicorp:vault:*:*:*:*:*:*:*:*
cpe:2.3:a:hashicorp:vault:*:*:*:*:enterprise:*:*:*
EPSS
Процентиль: 37%
0.00156
Низкий
4.5 Medium
CVSS3
6.5 Medium
CVSS3
Дефекты
CWE-532
CWE-532
Связанные уязвимости
CVSS3: 4.5
redhat
около 2 лет назад
Vault and Vault Enterprise (“Vault”) may expose sensitive information when enabling an audit device which specifies the `log_raw` option, which may log sensitive information to other audit devices, regardless of whether they are configured to use `log_raw`.
CVSS3: 4.5
github
около 2 лет назад
Hashicorp Vault may expose sensitive log information
EPSS
Процентиль: 37%
0.00156
Низкий
4.5 Medium
CVSS3
6.5 Medium
CVSS3
Дефекты
CWE-532
CWE-532