Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2020-13223: HashiCorp Blog: Vault

HashiCorp Vault and Vault Enterprise logged proxy environment variables that potentially included sensitive credentials. Fixed in 1.3.6 and 1.4.2.

CVE
#sql#mac#google#microsoft#js#kubernetes

Blog

  • Home
  • Products & Technology
  • Company
  • HashiCorp Voices
  • All

![Vault Logo](data:image/svg+xml;base64,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)

Vault is a platform for centralized secrets management, encryption as a service, and identity-based access.

Subscribe to Vault RSS

November 17 2021 | Products & Technology

Announcing HashiCorp Vault 1.9

Vault 1.9 can act as an OIDC provider, includes general availability of a key management secrets engine for Google Cloud, and updates to Transform, Namespaces, and the UI.

Announcing HashiCorp Vault 1.9

Integrating Azure AD Identity with HashiCorp Vault — Part 3: Azure Managed Identity Auth via Azure Auth Method

February 11 2022 | Products & Technology

Integrating Azure AD Identity with HashiCorp Vault — Part 3: Azure Managed Identity Auth via Azure Auth Method

Learn how to achieve machine authentication to HashiCorp Vault with the Azure auth method using Microsoft Azure managed identity — and set it up with Terraform.

HCP Vault Observability at Scale Using Datadog’s Vector

February 02 2022 | Company

HCP Vault Observability at Scale Using Datadog’s Vector

Get technical insight into how HCP Vault uses Datadog’s Vector integration to meet the observability needs of customers.

Enabling Transparent Data Encryption for Microsoft SQL with Vault

February 01 2022 | Products & Technology

Enabling Transparent Data Encryption for Microsoft SQL with Vault

Learn how HashiCorp Vault can help secure data in Microsoft SQL Server using a defense-in-depth encryption strategy.

Kubernetes Vault Integration via Sidecar Agent Injector vs. CSI Provider

January 26 2022 | Products & Technology

Kubernetes Vault Integration via Sidecar Agent Injector vs. CSI Provider

A detailed comparison of two HashiCorp-supported methods for HashiCorp Vault and Kubernetes integration.

How to Adopt a Producer-Consumer Model for HashiCorp Vault

January 19 2022 | Products & Technology

How to Adopt a Producer-Consumer Model for HashiCorp Vault

Learn our best practices and get customer-tested templates that help HashiCorp Vault users adopt efficient producer-consumer models.

HashiCorp’s Security and Compliance Program Takes Another Step Forward

January 14 2022 | Products & Technology

HashiCorp’s Security and Compliance Program Takes Another Step Forward

HashiCorp has renewed its SOC II Type II report for HCP Vault and HCP Consul, and obtained ISO 27017 and ISO 27018 certificates for its cloud products.

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907