Information Disclosure

2020-08-0621:36:23

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.002 Low

EPSS

Percentile

55.1%

JSON

vault is vulnerable to information disclosure. The vulnerability exists as HashiCorp Vault and Vault Enterprise inserts Sensitive Information into a Log File.

CPENameOperatorVersion
vault:3.12eq1.4.2-r0
github.com/hashicorp/vaultle1.4.1
github.com/hashicorp/vaultle1.3.5
vault:edgeeq1.3.2-r0
vault:edgeeq1.4.1-r1
vault:edgeeq1.3.3-r0
vault:edgeeq1.3.4-r0
vault:edgeeq1.4.2-r0
vault:3.12eq1.4.2-r0
github.com/hashicorp/vaultle1.4.1

Name	Operator	Version
vault:3.12	eq	1.4.2-r0
github.com/hashicorp/vault	le	1.4.1
github.com/hashicorp/vault	le	1.3.5
vault:edge	eq	1.3.2-r0
vault:edge	eq	1.4.1-r1
vault:edge	eq	1.3.3-r0
vault:edge	eq	1.3.4-r0
vault:edge	eq	1.4.2-r0
vault:3.12	eq	1.4.2-r0
github.com/hashicorp/vault	le	1.4.1