CVE-2021-38554 log
| Source |
|
| Severity | Medium |
| Remote | No |
| Type | Information disclosure |
| Description | HashiCorp Vault's UI up to version 1.7.3 erroneously cached and exposed user-viewed secrets between sessions in a single shared browser. |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-2294 | vault | 1.7.3-1 | 1.9.0-1 | Medium | Fixed |
| References |
|---|
https://discuss.hashicorp.com/t/hcsec-2021-19-vault-s-ui-cached-user-viewed-secrets-between-shared-browser-sessions/28166 |