CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-19786

HashiCorp Vault before 1.0.0 writes the master key to the server log in certain unusual or misconfigured scenarios in which incorrect data comes from the autoseal mechanism without an error being reported.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 53.2%

CVSS Severity

CVSS v3 Score 8.1

CVSS v2 Score 4.3

References

Products affected by CVE-2018-19786

Hashicorp » Vault » Version: 0.1.0

cpe:2.3:a:hashicorp:vault:0.1.0
Hashicorp » Vault » Version: 0.1.1

cpe:2.3:a:hashicorp:vault:0.1.1
Hashicorp » Vault » Version: 0.1.2

cpe:2.3:a:hashicorp:vault:0.1.2
Hashicorp » Vault » Version: 0.10.0

cpe:2.3:a:hashicorp:vault:0.10.0
Hashicorp » Vault » Version: 0.10.1

cpe:2.3:a:hashicorp:vault:0.10.1
Hashicorp » Vault » Version: 0.10.2

cpe:2.3:a:hashicorp:vault:0.10.2
Hashicorp » Vault » Version: 0.10.3

cpe:2.3:a:hashicorp:vault:0.10.3
Hashicorp » Vault » Version: 0.10.4

cpe:2.3:a:hashicorp:vault:0.10.4
Hashicorp » Vault » Version: 0.11.0

cpe:2.3:a:hashicorp:vault:0.11.0
Hashicorp » Vault » Version: 0.11.1

cpe:2.3:a:hashicorp:vault:0.11.1
Hashicorp » Vault » Version: 0.11.2

cpe:2.3:a:hashicorp:vault:0.11.2
Hashicorp » Vault » Version: 0.11.3

cpe:2.3:a:hashicorp:vault:0.11.3
Hashicorp » Vault » Version: 0.11.4

cpe:2.3:a:hashicorp:vault:0.11.4
Hashicorp » Vault » Version: 0.11.5

cpe:2.3:a:hashicorp:vault:0.11.5
Hashicorp » Vault » Version: 0.11.6

cpe:2.3:a:hashicorp:vault:0.11.6
Hashicorp » Vault » Version: 0.2.0

cpe:2.3:a:hashicorp:vault:0.2.0
Hashicorp » Vault » Version: 0.3.0

cpe:2.3:a:hashicorp:vault:0.3.0
Hashicorp » Vault » Version: 0.3.1

cpe:2.3:a:hashicorp:vault:0.3.1
Hashicorp » Vault » Version: 0.4.0

cpe:2.3:a:hashicorp:vault:0.4.0
Hashicorp » Vault » Version: 0.4.1

cpe:2.3:a:hashicorp:vault:0.4.1
Hashicorp » Vault » Version: 0.5.0

cpe:2.3:a:hashicorp:vault:0.5.0
Hashicorp » Vault » Version: 0.5.1

cpe:2.3:a:hashicorp:vault:0.5.1
Hashicorp » Vault » Version: 0.5.2

cpe:2.3:a:hashicorp:vault:0.5.2
Hashicorp » Vault » Version: 0.5.3

cpe:2.3:a:hashicorp:vault:0.5.3
Hashicorp » Vault » Version: 0.6.0

cpe:2.3:a:hashicorp:vault:0.6.0
Hashicorp » Vault » Version: 0.6.1

cpe:2.3:a:hashicorp:vault:0.6.1
Hashicorp » Vault » Version: 0.6.2

cpe:2.3:a:hashicorp:vault:0.6.2
Hashicorp » Vault » Version: 0.6.3

cpe:2.3:a:hashicorp:vault:0.6.3
Hashicorp » Vault » Version: 0.6.4

cpe:2.3:a:hashicorp:vault:0.6.4
Hashicorp » Vault » Version: 0.6.5

cpe:2.3:a:hashicorp:vault:0.6.5
Hashicorp » Vault » Version: 0.7.0

cpe:2.3:a:hashicorp:vault:0.7.0
Hashicorp » Vault » Version: 0.7.1

cpe:2.3:a:hashicorp:vault:0.7.1
Hashicorp » Vault » Version: 0.7.2

cpe:2.3:a:hashicorp:vault:0.7.2
Hashicorp » Vault » Version: 0.7.3

cpe:2.3:a:hashicorp:vault:0.7.3
Hashicorp » Vault » Version: 0.8.0

cpe:2.3:a:hashicorp:vault:0.8.0
Hashicorp » Vault » Version: 0.8.1

cpe:2.3:a:hashicorp:vault:0.8.1
Hashicorp » Vault » Version: 0.8.2

cpe:2.3:a:hashicorp:vault:0.8.2
Hashicorp » Vault » Version: 0.8.3

cpe:2.3:a:hashicorp:vault:0.8.3
Hashicorp » Vault » Version: 0.9.0

cpe:2.3:a:hashicorp:vault:0.9.0
Hashicorp » Vault » Version: 0.9.1

cpe:2.3:a:hashicorp:vault:0.9.1
Hashicorp » Vault » Version: 0.9.2

cpe:2.3:a:hashicorp:vault:0.9.2
Hashicorp » Vault » Version: 0.9.3

cpe:2.3:a:hashicorp:vault:0.9.3
Hashicorp » Vault » Version: 0.9.4

cpe:2.3:a:hashicorp:vault:0.9.4
Hashicorp » Vault » Version: 0.9.5

cpe:2.3:a:hashicorp:vault:0.9.5
Hashicorp » Vault » Version: 0.9.6

cpe:2.3:a:hashicorp:vault:0.9.6

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-19786

Products

Pricing

Contact Us