CVE-2021-3024

HashiCorp Vault and Vault Enterprise disclosed the internal IP address of the Vault node when responding to some invalid, unauthenticated HTTP requests. Fixed in 1.6.2 & 1.5.7...

CVE-2021-3024

CVE-2021-3024 affects HashiCorp Vault and Vault Enterprise, where internal Vault node IP addresses were disclosed in response to certain invalid, unauthenticated HTTP requests. The issue is fixed in Vault versions 1.6.2 and 1.5.7. Other connected records reiterate the same behavior and fix; no fu...