← Back

CVE-2021-27400

nvd nist
Published: Apr 22, 2021Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

HashiCorp Vault and Vault Enterprise Cassandra integrations (storage backend and database secrets engine plugin) did not validate TLS certificates when connecting to Cassandra clusters. Fixed in 1.6.4 and 1.7.1

Affected (4)

Products: Hashicorp: Vault
Hashicorp
1 product
Vault
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Hashicorp
Vault
Before 1.6.4
Vault
From 1.7.0 to 1.7.1
Vault
Before 1.6.4
Vault
From 1.7.0 to 1.7.1

Related CWEs

CWE-295
Improper Certificate Validation
The product does not validate, or incorrectly validates, a certificate.

References (2)

Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.