CVE-2024-0831

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-0831
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-0831.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-0831
Aliases
Published
2024-02-01T01:41:33Z
Modified
2026-10-28T02:30:48Z
Severity
  • 4.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N CVSS Calculator
Summary
Vault May Expose Sensitive Information When Configuring An Audit Log Device
Details

Vault and Vault Enterprise (“Vault”) may expose sensitive information when enabling an audit device which specifies the log_raw option, which may log sensitive information to other audit devices, regardless of whether they are configured to use log_raw.

Database specific 
{
    "cna_assigner": "HashiCorp",
    "cwe_ids": [
        "CWE-532"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/0xxx/CVE-2024-0831.json"
}
References

Affected packages

Git / github.com/hashicorp/vault

Affected ranges

Type
GIT
Repo
https://github.com/hashicorp/vault
Events
Introduced
b4d07277a6c5318bb50d3b94bbd6135dccb4c601
Fixed
0d8b67ef63815f20421c11fe9152d435af3403e6
Database specific
Show details 
{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "1.15.0"
                },
                {
                    "last_affected": "1.15.4"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandardRange"
        },
        {
            "cpe": "cpe:2.3:a:hashicorp:vault:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "1.15.0"
                },
                {
                    "fixed": "1.15.5"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:hashicorp:vault:*:*:*:*:enterprise:*:*:*",
            "range": [
                {
                    "introduced": "1.15.0"
                },
                {
                    "fixed": "1.15.5"
                }
            ],
            "source": "CPE_RANGE"
        }
    ]
}

Affected versions

sdk/v0.*
sdk/v0.10.2
v1.*
v1.15.0
v1.15.1
v1.15.2
v1.15.3
v1.15.4

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-0831.json"