Design/Logic Flaw

2018-12-0509:29:00

PRIOn knowledge base

www.prio-n.com

7.9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.7%

JSON

HashiCorp Vault before 1.0.0 writes the master key to the server log in certain unusual or misconfigured scenarios in which incorrect data comes from the autoseal mechanism without an error being reported.

CPENameOperatorVersion
vaultlt1.0.0

CPE	Name	Operator	Version
	vault	lt	1.0.0

References

github.com/hashicorp/vault/blob/master/CHANGELOG.md