← Back to CVE List

CVE-2024-2877

Published: 2024-04-30T15:15Z
Last Modified: 2024-11-21T09:10Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
Vault Enterprise, when configured with performance standby nodes and a configured audit device, will inadvertently log request headers on the standby node. These logs may have included sensitive HTTP request information in cleartext. This vulnerability, CVE-2024-2877, was fixed in Vault Enterprise 1.15.8. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt