Unrated severityNVD Advisory· Published Apr 22, 2021· Updated Aug 3, 2024

CVE-2021-27400

Description

HashiCorp Vault and Vault Enterprise Cassandra integrations (storage backend and database secrets engine plugin) did not validate TLS certificates when connecting to Cassandra clusters. Fixed in 1.6.4 and 1.7.1

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

HashiCorp/Vault Cassandra integrationsdescription
Hashicorp/Vaultllm-fuzzy
Range: <1.6.4
Hashicorp/Vault Enterprisellm-fuzzy
Range: <1.7.1
osv-coords
pkg:bitnami/vault
Range: < 1.6.4

Patches

Vulnerability mechanics

References

discuss.hashicorp.com/t/hcsec-2021-10-vault-s-cassandra-integrations-did-not-validate-tls-certificates/23463mitrex_refsource_CONFIRM

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000