CVE-2021-29653

Published: Apr 22, 2021Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

HashiCorp Vault and Vault Enterprise 1.5.1 and newer, under certain circumstances, may exclude revoked but unexpired certificates from the CRL. Fixed in 1.5.8, 1.6.4, and 1.7.1.

Affected (6)

Products: Hashicorp: Vault

Hashicorp

1 product

Vault

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Hashicorp Vault	From 1.5.1 to 1.5.8
Hashicorp Vault	From 1.6.0 to 1.6.4
Hashicorp Vault	From 1.7.0 to 1.7.1
Hashicorp Vault	From 1.5.1 to 1.5.8
Hashicorp Vault	From 1.6.0 to 1.6.4
Hashicorp Vault	From 1.7.0 to 1.7.1

Related CWEs

CWE-295

Improper Certificate Validation

The product does not validate, or incorrectly validates, a certificate.

References (2)

https://discuss.hashicorp.com/t/hcsec-2021-09-vault-s-pki-engine-crl-may-exclude-revoked-but-unexpired-certificates-after-tidy/23461/2

Source: cve@mitre.org

Vendor Advisory

https://discuss.hashicorp.com/t/hcsec-2021-09-vault-s-pki-engine-crl-may-exclude-revoked-but-unexpired-certificates-after-tidy/23461/2

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.