CVE-2021-3282

HashiCorp Vault Enterprise 1.6.0 & 1.6.1 allowed the `remove-peer` raft operator command to be executed against DR secondaries without authentication....

Description d'origine

La description telle que publiée par la source (souvent en anglais).

HashiCorp Vault Enterprise 1.6.0 & 1.6.1 allowed the remove-peer raft operator command to be executed against DR secondaries without authentication. Fixed in 1.6.2.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Paquets affectés

Bitnami vault

[{"type":"SEMVER","events":[{"introduced":"1.6.0"},{"fixed":"1.6.1"},{"introduced":"1.6.1"},{"fixed":"1.6.2"}]}]

Références

advisory discuss.hashicorp.com
advisory security.gentoo.org
web nvd.nist.gov