CVE-2022-38149

HashiCorp Consul Template up to 0.27.2, 0.28.2, and 0.29.1 may expose the contents of Vault secrets in the error returned by the *template.Template.Execute…

published August 17, 2022

CVSS
—
EPSS
1%
Percentile
57.7
In the wild
Unconfirmed
What it is

HashiCorp Consul Template up to 0.27.2, 0.28.2, and 0.29.1 may expose the contents of Vault secrets in the error returned by the *template.Template.Execute method, when given a template using Vault secret contents incorrectly. Fixed in 0.27.3, 0.28.3, and 0.29.2.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00849 · 57.7th percentile
Published
2022-08-17T14:30Z
EPSS history
Timeline
  • 17 AUG 14:30Z
    HashiCorp Consul Template up to 0.27.2, 0.28.2, and 0.29.1 may expose the contents of Vault secrets in the error returned by the *template.Template.Execute…
    cvelistv5