CVE-2021-38554

HashiCorp Vault and Vault Enterprise’s UI erroneously cached and exposed user-viewed secrets between sessions in a single shared browser

published August 13, 2021

CVSS
—
EPSS
1%
Percentile
59.6
In the wild
Unconfirmed
What it is

HashiCorp Vault and Vault Enterprise’s UI erroneously cached and exposed user-viewed secrets between sessions in a single shared browser. Fixed in 1.8.0 and pending 1.7.4 / 1.6.6 releases.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00911 · 59.6th percentile
Published
2021-08-13T15:45Z
EPSS history
Timeline
  • 13 AUG 15:45Z
    HashiCorp Vault and Vault Enterprise’s UI erroneously cached and exposed user-viewed secrets between sessions in a single shared browser
    cvelistv5