CVE-2021-45042
In HashiCorp Vault and Vault Enterprise before 1.7.7, 1.8.x before 1.8.6, and 1.9.x before 1.9.1, clusters using the Integrated Storage backend allowe...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
In HashiCorp Vault and Vault Enterprise before 1.7.7, 1.8.x before 1.8.6, and 1.9.x before 1.9.1, clusters using the Integrated Storage backend allowed an authenticated user (with write permissions to a kv secrets engine) to cause a panic and denial of service of the storage backend. The earliest affected version is 1.4.0.
影響パッケージ
Bitnami
vault
[{"type":"SEMVER","events":[{"introduced":"1.4.0"},{"fixed":"1.7.7"},{"introduced":"1.8.0"},{"fixed":"1.8.6"},{"introduced":"1.9.0"},{"fixed":"1.9.1"}]}]
参照URL
- advisory discuss.hashicorp.com
- advisory security.gentoo.org
- advisory hashicorp.com
- web nvd.nist.gov