CVE-2021-32074

HashiCorp vault-action (aka Vault GitHub Action) before 2.2.0 allows attackers to obtain sensitive information from log files because a multi-line secret was…

published May 7, 2021

CVSS
—
EPSS
2%
Percentile
79.3
In the wild
Unconfirmed
What it is

HashiCorp vault-action (aka Vault GitHub Action) before 2.2.0 allows attackers to obtain sensitive information from log files because a multi-line secret was not correctly registered with GitHub Actions for log masking.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01880 · 79.3th percentile
Published
2021-05-07T04:01Z
EPSS history
Timeline
  • 07 MAY 04:01Z
    HashiCorp vault-action (aka Vault GitHub Action) before 2.2.0 allows attackers to obtain sensitive information from log files because a multi-line secret was…
    cvelistv5