← All advisories

Medium severity5.3NVD Advisory· Published Aug 31, 2021· Updated Jun 17, 2026

CVE-2021-27668

CVE-2021-27668

Description

HashiCorp Vault Enterprise 0.9.2 through 1.6.2 allowed the read of license metadata from DR secondaries without authentication. Fixed in 1.6.3.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Hashicorp/Vault
cpe:2.3:a:hashicorp:vault:*:*:*:*:enterprise:*:*:*
Range: >=0.9.2,<1.6.3
HashiCorp/Vault Enterprisedescription
Hashicorp/Vault Enterprisellm-fuzzy
Range: 0.9.2 - 1.6.2
osv-coords
pkg:bitnami/vault
Range: >= 0.9.2, < 1.6.3

Patches

Vulnerability mechanics

References

2

discuss.hashicorp.com/t/hcsec-2021-05-vault-enterprise-s-dr-secondaries-exposed-license-metadata-without-authentication/21427nvdVendor Advisory
security.gentoo.org/glsa/202207-01nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.