CVE-2018-19786

2018-12-0509:29:00

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.7%

JSON

HashiCorp Vault before 1.0.0 writes the master key to the server log in certain unusual or misconfigured scenarios in which incorrect data comes from the autoseal mechanism without an error being reported.

CPENameOperatorVersion
vaulteq0.10.3
vaulteq0.11.0
vaulteq0.1.0
vaulteq0.7.1
vaulteq0.11.3
vaulteq0.1.1
vaulteq0.2.0.rc1
vaulteq0.7.3
vaulteq0.9.5
vaulteq0.6.3