Related Vulnerabilities: CVE-2021-38554  

HashiCorp Vault's UI up to version 1.7.3 erroneously cached and exposed user-viewed secrets between sessions in a single shared browser.

Severity Medium

Remote No

Type Information disclosure

Description

HashiCorp Vault's UI up to version 1.7.3 erroneously cached and exposed user-viewed secrets between sessions in a single shared browser.

AVG-2294 vault 1.7.3-1 Medium Vulnerable

https://discuss.hashicorp.com/t/hcsec-2021-19-vault-s-ui-cached-user-viewed-secrets-between-shared-browser-sessions/28166