Lucene search

K
redhatcveRedhat.comRH:CVE-2024-0831
HistoryFeb 28, 2024 - 12:34 p.m.

CVE-2024-0831

2024-02-2812:34:58
redhat.com
access.redhat.com
6
sensitive information
disclosure
vulnerability
hashicorp vault
audit device
log option

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

6.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

23.5%

A sensitive information disclosure vulnerability was found in Hashicorp Vault. Enabling an audit device that specifies the log_raw option may log sensitive information to oth

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

6.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

23.5%

Related for RH:CVE-2024-0831