Lucene search

K
osvGoogleOSV:GO-2024-3113
HistorySep 06, 2024 - 8:43 p.m.

Vault Leaks Client Token and Token Accessor in Audit Devices in github.com/hashicorp/vault

2024-09-0620:43:50
Google
osv.dev
4
vault
client token
token accessor
audit devices
github
hashicorp
software

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

AI Score

6.7

Confidence

Low

Vault Leaks Client Token and Token Accessor in Audit Devices in github.com/hashicorp/vault

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

AI Score

6.7

Confidence

Low