BIT-vault-2024-0831

See a problem?
Import Source
https://github.com/bitnami/vulndb/tree/main/data/vault/BIT-vault-2024-0831.json
JSON Data
https://api.osv.dev/v1/vulns/BIT-vault-2024-0831
Aliases
Published
2024-03-06T11:07:52.877Z
Modified
2025-05-20T10:02:07.006Z
Summary
Vault May Expose Sensitive Information When Configuring An Audit Log Device
Details

Vault and Vault Enterprise (“Vault”) may expose sensitive information when enabling an audit device which specifies the log_raw option, which may log sensitive information to other audit devices, regardless of whether they are configured to use log_raw.

Database specific 
{
    "severity": "Medium",
    "cpes": [
        "cpe:2.3:a:hashicorp:vault:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:hashicorp:vault:*:*:*:*:enterprise:*:*:*"
    ]
}
References

Affected packages

Bitnami / vault

Package

Name
vault
Purl
pkg:bitnami/vault

Severity

  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator

Affected ranges

Type
SEMVER
Events
Introduced
1.15.0
Fixed
1.15.5

Database specific

source 
"https://github.com/bitnami/vulndb/tree/main/data/vault/BIT-vault-2024-0831.json"