BIT-vault-2021-27400

vendorUSosv

view advisory published 2024-03-06Licence: per source

HashiCorp Vault and Vault Enterprise Cassandra integrations (storage backend and database secrets engine plugin) did not validate TLS certificates when connecting to Cassandra clusters. Fixed in 1.6.4 and 1.7.1

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2021-27400US	high7.5	0.57% (47th)	—	2021-04-22
HashiCorp Vault and Vault Enterprise Cassandra integrations (storage backend and database secrets engine plugin) did not validate TLS certificates when connecting to Cassandra clus…

references

External citations — patches, advisories, analysis.

https://discuss.hashicorp.com/t/hcsec-2021-10-vault-s-cassandra-integrations-did-not-validate-tls-certificates/23463ADVISORY
https://nvd.nist.gov/vuln/detail/CVE-2021-27400WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan