Home
HIGH: 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HDefault status
unaffected
0.11.2 (semver) before 2.0.0
affected
Default status
unaffected
0.11.2 (semver) before 2.0.0
affected
Description
If a Vault auth mount is configured to pass through the "Authorization" header, and the "Authorization" header is used to authenticate to Vault, Vault forwarded the Vault token to the auth plugin backend. Fixed in 2.0.0, 1.21.5, 1.20.10, and 1.19.16.
Problem types
CWE-201: Insertion of Sensitive Information Into Sent Data
Product status
0.11.2 (semver) before 2.0.0
0.11.2 (semver) before 2.0.0
Credits
This issue was identified and reported by Oleh Konko of 1seal.
References
discuss.hashicorp.com/...incorrect-header-sanitization/77344