VDB
CVE-2024-8365
CVE-2024-8365
PUBLISHED
Vault Community Edition and Vault Enterprise experienced a regression where functionality that HMAC’d sensitive headers in the configured audit device, specifically client tokens and token accessors, was removed. This resulted in the plaintext values of client tokens and token accessors being stored in the audit log. This vulnerability, CVE-2024-8365, was fixed in Vault Community Edition and Vault Enterprise 1.17.5 and Vault Enterprise 1.16.9.
EPSS 0.35% · 57.5th percentile
Risk Scores
EPSS Score
0.35%
57.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | vault | 1.16.7, 1.17.3 |
| Bitnami | vault | 1.16.7, 1.17.3 |
Timeline
- Sep 1, 2024 CVE Published
- Sep 2, 2024 EPSS Score
- Sep 22, 2024 EPSS Score
- Sep 24, 2024 CVE Updated
- Oct 5, 2024 Coalition ESS Score
- Oct 12, 2024 EPSS Score
- Nov 1, 2024 EPSS Score
- Nov 21, 2024 EPSS Score
- Dec 13, 2024 EPSS Score
- Jan 2, 2025 EPSS Score
- Jan 22, 2025 EPSS Score
- Feb 11, 2025 EPSS Score