CVE-2024-2877: 
HashiCorp Vault vulnerability analysis and mitigation

Vault Enterprise, when configured with performance standby nodes and a configured audit device, experiences a security vulnerability (CVE-2024-2877) where request headers are inadvertently logged on the standby node. This vulnerability potentially exposes sensitive HTTP request information in cleartext. The issue was discovered and fixed in Vault Enterprise version 1.15.8 (NVD).

The vulnerability is classified with a CVSS v3.1 Base Score of 5.5 (MEDIUM) with the vector string CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N. The issue is categorized under CWE-532 (Insertion of Sensitive Information into Log File). The vulnerability specifically affects the audit logging mechanism when Vault Enterprise is deployed with performance standby nodes (NVD).

The primary impact of this vulnerability is the potential exposure of sensitive information. When exploited, the vulnerability could lead to the disclosure of sensitive HTTP request headers in cleartext within the audit logs of standby nodes, potentially compromising sensitive data (NetApp Advisory).

The vulnerability requires local access and high privileges for exploitation, as indicated by the CVSS metrics (AV:L/AC:L/PR:H/UI:R). The attack complexity is low, but user interaction is required for successful exploitation (NVD).

The primary mitigation for this vulnerability is to upgrade to Vault Enterprise version 1.15.8 or later, which contains the fix for this issue (NVD).