PT-2024-22569 · Hashicorp · Vault Enterprise

Published 2024-04-30 · Updated 2025-08-08 · CVE-2024-2877

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Vault Enterprise versions prior to 1.15.8

Description The issue arises when Vault Enterprise is configured with performance standby nodes and a configured audit device, causing it to inadvertently log request headers on the standby node. These logs may include sensitive HTTP request information in cleartext.

Recommendations For versions prior to 1.15.8, update to Vault Enterprise 1.15.8 to resolve the issue. As a temporary workaround, consider restricting access to the audit device on performance standby nodes until the update is applied.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

BIT-VAULT-2024-2877

CVE-2024-2877

Affected Products

Vault Enterprise

References · 12

• https://osv.dev/vulnerability/CVE-2024-2877 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-2877 · Security Note
• https://osv.dev/vulnerability/BIT-vault-2024-2877 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1785350940779823272 · Twitter Post
• https://twitter.com/linuxpatch/status/1785340594878857370 · Twitter Post
• https://twitter.com/CVEnew/status/1785326711992889849 · Twitter Post
• https://t.me/cvenotify/83293 · Telegram Post
• https://discuss.hashicorp.com/t/hsec-2024-10-vault-enterprise-leaks-sensitive-http-request-headers-in-audit-log-when-deployed-with-a-performance-standby-node · Note
• https://t.me/cveNotify/131489 · Telegram Post
• https://t.me/cvenotify/78600 · Telegram Post
• https://t.me/cvenotify/78577 · Telegram Post
• https://security.netapp.com/advisory/ntap-20240614-0002 · Note