CVE-2018-19786

HashiCorp Vault before 1.0.0 writes the master key to the server log in certain unusual or misconfigured scenarios in which incorrect data comes from the autoseal mechanism without an error being reported...

CVE-2018-19786

HashiCorp Vault before 1.0.0 can write the master key to the server log in certain misconfigured autoseal scenarios without reporting an error. Affected component: Vault autoseal flow; root cause is improper handling of autoseal data. Impact: potential exposure of the master key via logs, enablin...