← All advisories

Unrated severityNVD Advisory· Published Aug 31, 2021· Updated Aug 3, 2024

CVE-2021-27668

CVE-2021-27668

Description

HashiCorp Vault Enterprise 0.9.2 through 1.6.2 allowed the read of license metadata from DR secondaries without authentication. Fixed in 1.6.3.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

HashiCorp/Vault Enterprisedescription
Hashicorp/Vault Enterprisellm-fuzzy
Range: >=0.9.2, <=1.6.2
osv-coords
pkg:bitnami/vault
Range: >= 0.9.2, < 1.6.3

Patches

Vulnerability mechanics

References

2

security.gentoo.org/glsa/202207-01mitrevendor-advisoryx_refsource_GENTOO
discuss.hashicorp.com/t/hcsec-2021-05-vault-enterprise-s-dr-secondaries-exposed-license-metadata-without-authentication/21427mitrex_refsource_MISC

News mentions

0

No linked articles in our index yet.