CVE-2021-27668
HashiCorp Vault Enterprise 0.9.2 through 1.6.2 allowed the read of license metadata from DR secondaries without authentication. Fixed in 1.6.3.
Original description
The description as published by the source.
HashiCorp Vault Enterprise 0.9.2 through 1.6.2 allowed the read of license metadata from DR secondaries without authentication. Fixed in 1.6.3.
Affected packages
Bitnami
vault
[{"type":"SEMVER","events":[{"introduced":"0.9.2"},{"fixed":"1.6.3"}]}]
References
- advisory discuss.hashicorp.com
- advisory security.gentoo.org
- web nvd.nist.gov