CVE-2018-19786

—

CVSS 3.0

8.1 high

EPSS

<1%p59

Published

Dec 5, 2018 (Dec 5, 2018)

Modified

Jun 17, 2026

Description

HashiCorp Vault before 1.0.0 writes the master key to the server log in certain unusual or misconfigured scenarios in which incorrect data comes from the autoseal mechanism without an error being reported.

Vendors: hashicorp
Products: vault
Weakness: CWE-532
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.