VYPR
← All advisories
High severity8.1OSV Advisory· Published Dec 5, 2018· Updated Jun 17, 2026

CVE-2018-19786

CVE-2018-19786

Description

HashiCorp Vault before 1.0.0 writes the master key to the server log in certain unusual or misconfigured scenarios in which incorrect data comes from the autoseal mechanism without an error being reported.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Hashicorp/VaultOSV3 versions
    v0.1.0, v0.1.1, v0.1.2, …+ 2 more
    • (no CPE)range: v0.1.0, v0.1.1, v0.1.2, …
    • cpe:2.3:a:hashicorp:vault:*:*:*:*:*:*:*:*range: <1.0.0
    • (no CPE)range: <1.0.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.