CVE-2020-13223
HashiCorp Vault and Vault Enterprise logged proxy environment variables that potentially included sensitive credentials. Fixed in 1.3.6 and 1.4.2.
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
HashiCorp Vault and Vault Enterprise logged proxy environment variables that potentially included sensitive credentials. Fixed in 1.3.6 and 1.4.2.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
影響パッケージ
Bitnami
vault
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.3.6"},{"introduced":"1.4.0"},{"fixed":"1.4.2"}]}]
参照URL
- advisory github.com
- advisory hashicorp.com
- web nvd.nist.gov