Security Advisory

CVE-2021-3024

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-02-01 15:45:23
Last updated 2024-08-03 16:45:50
Assigner mitre
State PUBLISHED

Description

HashiCorp Vault and Vault Enterprise disclosed the internal IP address of the Vault node when responding to some invalid, unauthenticated HTTP requests. Fixed in 1.6.2 & 1.5.7.