Security Advisory
CVE-2021-3024
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
HashiCorp Vault and Vault Enterprise disclosed the internal IP address of the Vault node when responding to some invalid, unauthenticated HTTP requests. Fixed in 1.6.2 & 1.5.7.