CVE-2021-29653
HashiCorp Vault and Vault Enterprise 1.5.1 and newer, under certain circumstances, may exclude revoked but unexpired certificates from the CRL. Fixed...
Original description
The description as published by the source.
HashiCorp Vault and Vault Enterprise 1.5.1 and newer, under certain circumstances, may exclude revoked but unexpired certificates from the CRL. Fixed in 1.5.8, 1.6.4, and 1.7.1.
Affected packages
Bitnami
vault
[{"type":"SEMVER","events":[{"introduced":"1.5.1"},{"fixed":"1.5.8"},{"introduced":"1.6.0"},{"fixed":"1.6.4"},{"introduced":"1.7.0"},{"fixed":"1.7.1"}]}]
References
- advisory discuss.hashicorp.com
- web nvd.nist.gov