Read the docs
TI-2024-00768 Aliases CVE-2024-0831GHSA-vgh3-mwxq-rcp8

Vault May Expose Sensitive Information When Configuring An Audit Log Device

Priority LOW 30CWE-532Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and GitHub. Impact type from CWE-532.

Summary

Vault and Vault Enterprise (“Vault”) may expose sensitive information when enabling an audit device which specifies the `log_raw` option, which may log sensitive information to other audit devices, regardless of whether they are configured to use `log_raw`.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00764 55th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed github.com/hashicorp/vault (Go): 1.15.5

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
HashiCorpVault1.15.0 – 1.15.4—No fix listedCNA
HashiCorpVault Enterprise1.15.0 – 1.15.4—No fix listedCNA
—github.com/hashicorp/vault (Go)1.15.0 to before 1.15.51.15.5Patch availableGHSA-vgh3-mwxq-rcp8
  • Vault VendorHashiCorp Affected 1.15.0 – 1.15.4 Fixed in — No fix listed CNA
  • Vault Enterprise VendorHashiCorp Affected 1.15.0 – 1.15.4 Fixed in — No fix listed CNA
  • github.com/hashicorp/vault (Go) Vendor— Affected 1.15.0 to before 1.15.5 Fixed in 1.15.5 Patch available GHSA-vgh3-mwxq-rcp8

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:hashicorp:vault:*:*:*:*:*:*:*:*1.15.0 to before 1.15.5VulnerableHashiCorp
cpe:2.3:a:hashicorp:vault:*:*:*:*:enterprise:*:*:*1.15.0 to before 1.15.5VulnerableHashiCorp
  • cpe:2.3:a:hashicorp:vault:*:*:*:*:*:*:*:* Versions 1.15.0 to before 1.15.5 Vulnerable ·HashiCorp
  • cpe:2.3:a:hashicorp:vault:*:*:*:*:enterprise:*:*:* Versions 1.15.0 to before 1.15.5 Vulnerable ·HashiCorp

Remediation

  • Fix · GHSA-vgh3-mwxq-rcp8 github.com/hashicorp/vault (Go) Fixed in 1.15.5 Advisory →

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

Not affected: 7 products
  • Custom Metric Autoscaler operator for Red Hat Openshift
  • OpenShift Pipelines
  • Red Hat OpenShift Container Platform 4
  • Red Hat OpenShift Data Science (RHODS)
  • Red Hat Openshift Container Storage 4
  • Red Hat Openshift Data Foundation 4
  • cert-manager Operator for Red Hat OpenShift

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-0831
  2. 2026-10-03 Alias added: GHSA-vgh3-mwxq-rcp8

References

Exploit 1

Advisory 2

Other 4

  • TI-2024-01904 Vault Cert Auth Method Did Not Correctly Validate Non-CA Certificates CVSS 3.1CRITICAL 9.8
  • TI-2022-19053 An issue was discovered in HashiCorp Vault and Vault Enterprise before 1.11.3. CVSS 3.1CRITICAL 9.1
  • TI-2020-17874 The official vault docker images before 0.11.6 contain a blank password for a root user. CVSS 3.1CRITICAL 9.8
  • TI-2020-10142 HashiCorp Vault and Vault Enterprise 1.4.0 and 1.4.1, when configured with the GCP… CVSS 3.1CRITICAL 9.8
  • TI-2026-04407 Vault Vulnerable to Server-Side Request Forgery in ACME Challenge Validation via Attacker-Controlled DNS CVSS 3.1HIGH 8.6
  • TI-2025-05421 Arbitrary Remote Code Execution via Plugin Catalog Abuse CVSS 3.1CRITICAL 9.1
See all 71 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences