Headline

CVE-2021-3024: HCSEC-2021-02 - Vault API Endpoint Exposed Internal IP Address Without Authentication

HashiCorp Vault and Vault Enterprise disclosed the internal IP address of the Vault node when responding to some invalid, unauthenticated HTTP requests. Fixed in 1.6.2 & 1.5.7.

3 years ago

CVE

Open in Source

#auth

Gentoo Linux Security Advisory 202207-1 - Multiple vulnerabilities have been discovered in HashiCorp Vault, the worst of which could result in denial of service. Versions less than 1.10.3 are affected.

2 years ago

Packet Storm

Open in Source

#vulnerability #web #mac #linux #dos