CVE-2021-3024
HashiCorp Vault and Vault Enterprise disclosed the internal IP address of the Vault node when responding to some invalid, unauthenticated HTTP request...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
HashiCorp Vault and Vault Enterprise disclosed the internal IP address of the Vault node when responding to some invalid, unauthenticated HTTP requests. Fixed in 1.6.2 & 1.5.7.
Paquets affectés
Bitnami
vault
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.5.7"},{"introduced":"1.6.0"},{"fixed":"1.6.2"}]}]
Références
- advisory discuss.hashicorp.com
- advisory security.gentoo.org
- web nvd.nist.gov