CVE-2021-3024
HashiCorp Vault and Vault Enterprise disclosed the internal IP address of the Vault node when responding to some invalid, unauthenticated HTTP request...
Original description
The description as published by the source.
HashiCorp Vault and Vault Enterprise disclosed the internal IP address of the Vault node when responding to some invalid, unauthenticated HTTP requests. Fixed in 1.6.2 & 1.5.7.
Affected packages
Bitnami
vault
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.5.7"},{"introduced":"1.6.0"},{"fixed":"1.6.2"}]}]
References
- advisory discuss.hashicorp.com
- advisory security.gentoo.org
- web nvd.nist.gov