PT-2024-15850

CVE-2024-0831

Published

2024-02-01

Updated

2024-06-28

Description by

CVSS 3.1

4.5

Medium

MetricsAV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Hashicorp Vault (affected versions not specified)

Description The issue concerns the exposure of sensitive information when an audit device with the log raw option is enabled. This may cause sensitive information to be logged to other audit devices, regardless of their configuration regarding the log raw option.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Vendors

Affected products

Weakness enumeration

CWE-532: Insertion of Sensitive Information into Log File

Related identifiers

CVE-2024-0831

GHSA-VGH3-MWXQ-RCP8

BIT-VAULT-2024-0831