Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
HashiCorp vault-action (aka Vault GitHub Action) before 2.2.0 allows attackers to obtain sensitive information from log files because a multi-line secret was not correctly registered with GitHub Actions for log masking.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
HashiCorp Vault 日志信息泄露漏洞
Vulnerability Description
Hashicorp HashiCorp Vault是美国HashiCorp（Hashicorp）公司的一款私钥访问管理工具。 HashiCorp vault-action 2.2.0 之前版本存在安全漏洞，该漏洞允许攻击者从日志文件中获取敏感信息，因为一个多行秘密没有正确地注册到GitHub Actions以屏蔽日志。
CVSS Information
N/A
Vulnerability Type
N/A