VULNERABILITY INTELLIGENCE

CVE-2018-19786

CVSS score8.1 HIGH
EPSS probability0.93%
CISA KEVNot currently listed
Published2018-12-05
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

HashiCorp Vault before 1.0.0 writes the master key to the server log in certain unusual or misconfigured scenarios in which incorrect data comes from the autoseal mechanism without an error being reported.

Weakness classification

  • CWE-532: Insertion of Sensitive Information into Log File

Primary references