tocsin

Alpine/vault: medium 5.3

HashiCorp Vault and Vault Enterprise’s UI erroneously cached and exposed user-viewed secrets between sessions in a single shared browser. Fixed in 1.8.0 and pending 1.7.4 / 1.6.6 releases.

Action: Upgrade vault to 1.7.4-r0 or later.

Affected

introducedfixedlast affected
01.7.4-r0-

Fixed versions

1.7.4-r0

Sources

published · modified · JSON