HashiCorp Vault Unseal Key

Description

General

• Documentation: https://www.vaultproject.io/docs/concepts/seal

• Summary: HashiCorp Vault is a solution to securely store and manage access to secrets and systems based on trusted sources of application and user identity. This detector can detect unseal keys used to get access to the vault master key.

• IPs allowlist: This feature is not available.

• Scopes: Unsealing a vault requires entering a minimum number of different unseal keys. This number is defined when configuring the vault.

Revoke the secret

The process is documented in the Rekeying & Rotating Vault documentation.

Check for suspicious activity

This feature is not available.

Details for HashiCorp Vault Unseal Key

• Family: token

• Category: secret_management

• Company: HashiCorp

• High recall: False

• Validity check available: False

• Analyzer available: False

• Minimum number of matches: 1

• Occurrences found for one million commits: 0.35

• Prefixed: False

• PreValidators:

- type: ContentWhitelistPreValidator
  patterns:
    - unseal[_ .-]?key

Examples

- text: |
    VAULT_UNSEAL_KEY_3="C3fk5Q0ANMFlbjQk4E0MKD8xRdNW0YbLA/0pfMSWEouI"
  apikey: C3fk5Q0ANMFlbjQk4E0MKD8xRdNW0YbLA/0pfMSWEouI

- text: |
    UNSEAL_KEY: BoK4FvGkefnzweuiciDcfrxYco43/45HgtrhtMSWZzOG
  apikey: BoK4FvGkefnzweuiciDcfrxYco43/45HgtrhtMSWZzOG

- text: |
    UNSEAL KEY: BoK4FvGkefnzweuiciDcfrxYco43/45HgtrhtMSWZzOG
  apikey: BoK4FvGkefnzweuiciDcfrxYco43/45HgtrhtMSWZzOG