Headline
CVE-2020-13223: HashiCorp Blog: Vault
HashiCorp Vault and Vault Enterprise logged proxy environment variables that potentially included sensitive credentials. Fixed in 1.3.6 and 1.4.2.
Blog
- Home
- Products & Technology
- Company
- HashiCorp Voices
- All
![Vault Logo](data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMjA4IiBoZWlnaHQ9Ijg4IiB2aWV3Qm94PSIwIDAgMjA4IDg4IiBmaWxsPSJub25lIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjxwYXRoIGQ9Ik0xMTQuODQ5IDIzLjY5aDcuOTJMMTEwLjY5OSA2NGgtMTEuMjVsLTEyLTQwLjI4aDcuOTJsOS43NCAzMy41NyA5Ljc0LTMzLjZ6TTE0NC43NSA2NGgtNmwtLjU1LTJhMTYuMTIgMTYuMTIgMCAwMS04Ljc3IDIuNmMtNS4zOCAwLTcuNjgtMy42OS03LjY4LTguNzcgMC02IDIuNi04LjI5IDguNTktOC4yOWg3LjA4di0zLjFjMC0zLjI3LS45MS00LjQyLTUuNjMtNC40MmE0MC43MSA0MC43MSAwIDAwLTguMTYuOTFsLS45MS01LjYzYTM4LjY3OCAzOC42NzggMCAwMTEwLjEtMS4zOWM5LjI1IDAgMTIgMy4yNyAxMiAxMC42NUwxNDQuNzUgNjR6bS03LjM3LTExLjEzaC01LjQ1Yy0yLjQyIDAtMy4wOC42Ny0zLjA4IDIuOTEgMCAyIC42NiAzIDMgM2ExMS43MiAxMS43MiAwIDAwNS41Ny0xLjUxbC0uMDQtNC40em0xOC45OTItMTguMzV2MjAuNTZjMCAxLjU3LjY2IDIuMzYgMi4zNiAyLjM2IDEuNyAwIDUtMS4wOSA3LjY4LTIuNDhWMzQuNTJoNy4zOFY2NGgtNS42M2wtLjcyLTIuNDhhMjkuNDM3IDI5LjQzNyAwIDAxLTExLjggMy4wOWMtNC45IDAtNi42NS0zLjQ1LTYuNjUtOC43MVYzNC41Mmg3LjM4ek0xNzcuNzE5IDY0VjIyLjQ4bDcuMzgtMVY2NGgtNy4zOHptMjkuMzg4LS41N2EyMC42MTggMjAuNjE4IDAgMDEtNi40NyAxLjE1Yy01LjM4IDAtOC4xMS0yLjU0LTguMTEtNy44di0xNi40aC00LjQxdi01Ljg2aDQuNDFWMjcuMmw3LjM4LTF2OC4zNWg3LjU2bC0uNDggNS44NmgtNy4wOHYxNS40YTIuMzIzIDIuMzIzIDAgMDAxLjU5NiAyLjUxNGMuMzQ0LjExLjcwOC4xNCAxLjA2NC4wODVhMTMuOTE5IDEzLjkxOSAwIDAwMy42OS0uNjFsLjg1IDUuNjN6TTAgMTIuNmwzMS44NSA2My45Mkw2My45MiAxMi42SDB6bTM1LjYzIDEyLjgzaDMuNzF2My43MWgtMy43MXYtMy43MXptLTcuMzggMTQuODJoLTMuN3YtMy43aDMuN3YzLjd6bTAtNS41NmgtMy43VjMxaDMuN3YzLjY5em0wLTUuNTVoLTMuN3YtMy43MWgzLjd2My43MXptNS42IDE2LjY3aC0zLjdWNDIuMWgzLjd2My43MXptMC01LjU2aC0zLjd2LTMuN2gzLjd2My43em0wLTUuNTZoLTMuN1YzMWgzLjd2My42OXptMC01LjU1aC0zLjd2LTMuNzFoMy43djMuNzF6TTM1LjYzIDMxaDMuNzF2My43aC0zLjcxVjMxem0wIDkuMjZ2LTMuN2gzLjcxdjMuN2gtMy43MXoiIGZpbGw9IiNmZmYiLz48L3N2Zz4=)
Vault is a platform for centralized secrets management, encryption as a service, and identity-based access.
Subscribe to Vault RSS
November 17 2021 | Products & Technology
Announcing HashiCorp Vault 1.9
Vault 1.9 can act as an OIDC provider, includes general availability of a key management secrets engine for Google Cloud, and updates to Transform, Namespaces, and the UI.
February 11 2022 | Products & Technology
Integrating Azure AD Identity with HashiCorp Vault — Part 3: Azure Managed Identity Auth via Azure Auth Method
Learn how to achieve machine authentication to HashiCorp Vault with the Azure auth method using Microsoft Azure managed identity — and set it up with Terraform.
February 02 2022 | Company
HCP Vault Observability at Scale Using Datadog’s Vector
Get technical insight into how HCP Vault uses Datadog’s Vector integration to meet the observability needs of customers.
February 01 2022 | Products & Technology
Enabling Transparent Data Encryption for Microsoft SQL with Vault
Learn how HashiCorp Vault can help secure data in Microsoft SQL Server using a defense-in-depth encryption strategy.
January 26 2022 | Products & Technology
Kubernetes Vault Integration via Sidecar Agent Injector vs. CSI Provider
A detailed comparison of two HashiCorp-supported methods for HashiCorp Vault and Kubernetes integration.
January 19 2022 | Products & Technology
How to Adopt a Producer-Consumer Model for HashiCorp Vault
Learn our best practices and get customer-tested templates that help HashiCorp Vault users adopt efficient producer-consumer models.
January 14 2022 | Products & Technology
HashiCorp’s Security and Compliance Program Takes Another Step Forward
HashiCorp has renewed its SOC II Type II report for HCP Vault and HCP Consul, and obtained ISO 27017 and ISO 27018 certificates for its cloud products.