CVE-2024-8365 is a regression vulnerability in Vault Community Edition and Vault Enterprise where the functionality that HMAC’d sensitive headers, specifically client tokens and token accessors, in the configured audit device was removed. As a result, these sensitive values were stored in plaintext in audit logs. This exposure could lead to unauthorized access if audit logs are accessed by unauthorized parties. The vulnerability affects versions >=1.16.7 <1.16.9 and >=1.17.3 <1.17.5 and was fixed in versions 1.16.9 and 1.17.5.

Client tokens and token accessors, which are sensitive authentication credentials, were exposed in plaintext within audit logs. This could allow an attacker with access to audit logs to obtain these tokens and potentially impersonate legitimate clients. There are no known exploits in the wild at this time.

A fix is available and has been released in Vault Community Edition and Vault Enterprise versions 1.16.9 and 1.17.5. Users should upgrade affected versions to these fixed versions or later to remediate the vulnerability. No other mitigation is indicated by the vendor advisory.