VYPR
← All advisories
High severity7.5NVD Advisory· Published Apr 22, 2021· Updated Jun 17, 2026

CVE-2021-27400

CVE-2021-27400

Description

HashiCorp Vault and Vault Enterprise Cassandra integrations (storage backend and database secrets engine plugin) did not validate TLS certificates when connecting to Cassandra clusters. Fixed in 1.6.4 and 1.7.1

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • osv-coords
    pkg:bitnami/vault
    Range: < 1.6.4
  • HashiCorp/Vault Cassandra integrationsdescription
  • Hashicorp/Vault3 versions
    cpe:2.3:a:hashicorp:vault:*:*:*:*:-:*:*:*+ 2 more
    • cpe:2.3:a:hashicorp:vault:*:*:*:*:-:*:*:*range: <1.6.4
    • cpe:2.3:a:hashicorp:vault:*:*:*:*:enterprise:*:*:*range: <1.6.4
    • (no CPE)range: <=1.6.4, <=1.7.1
  • Hashicorp/Vault Enterprisellm-fuzzy
    Range: <=1.6.4, <=1.7.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.