CVE-2024-2877

Summary

CVE-2024-2877 is a vulnerability affecting Vault Enterprise. When performance standby nodes are configured along with an audit device, Vault Enterprise inadvertently logs request headers on the standby node. These logs may contain sensitive HTTP request information in cleartext. This issue was resolved in Vault Enterprise version 1.15.8. Unauthorized access to these logs could potentially lead to exposure of confidential data. Users are advised to update to the latest version of Vault Enterprise to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.