Exposure of Vault secrets via error messages in github.com/hashicorp/consul-template

🗓️ 21 Sep 2022 15:27:10Reported by GoogleType

osv🔗 osv.dev👁 13 Views

Exposure of Vault secrets in github.com hashicorp consul-templat

Reporter	Title	Published	Views	Family All 10
RedhatCVE	CVE-2022-38149	30 Aug 202218:40	–	redhatcve
Prion	Design/Logic Flaw	17 Aug 202215:15	–	prion
Cvelist	CVE-2022-38149	17 Aug 202214:30	–	cvelist
OSV	CVE-2022-38149	17 Aug 202215:15	–	osv
OSV	HashiCorp Consul Template could reveal Vault secret contents in error messages	18 Aug 202200:00	–	osv
Github Security Blog	HashiCorp Consul Template could reveal Vault secret contents in error messages	18 Aug 202200:00	–	github
NVD	CVE-2022-38149	17 Aug 202215:15	–	nvd
AlpineLinux	CVE-2022-38149	17 Aug 202215:15	–	alpinelinux
CVE	CVE-2022-38149	17 Aug 202215:15	–	cve
RedHat Linux	(RHSA-2023:3742) Important: Red Hat OpenShift Data Foundation 4.13.0 security and bug fix update	21 Jun 202315:20	–	redhat

Source	Link
discuss	www.discuss.hashicorp.com/t/hsec-2022-16-consul-template-may-expose-vault-secrets-when-processing-invalid-input/43215
github	www.github.com/hashicorp/consul-template/commit/d6a6f4af219c28e67d847ba0e0b2bea8f5bb9076

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

21 Sep 2022 15:10Current

7.6High risk

Vulners AI Score7.6

CVSS37.5

EPSS0.002