CVE-2021-27668
HashiCorp Vault Enterprise 0.9.2 through 1.6.2 allowed the read of license metadata from DR secondaries without authentication. Fixed in 1.6.3.
Description d'origine
La description telle que publiée par la source (souvent en anglais).
HashiCorp Vault Enterprise 0.9.2 through 1.6.2 allowed the read of license metadata from DR secondaries without authentication. Fixed in 1.6.3.
Paquets affectés
Bitnami
vault
[{"type":"SEMVER","events":[{"introduced":"0.9.2"},{"fixed":"1.6.3"}]}]
Références
- advisory discuss.hashicorp.com
- advisory security.gentoo.org
- web nvd.nist.gov