exploitDog

GHSA-4wr6-x9g6-m47v

Опубликовано: 24 мая 2022

Источник: github

Github: Не прошло ревью

Описание

HashiCorp Vault and Vault Enterprise Cassandra integrations (storage backend and database secrets engine plugin) did not validate TLS certificates when connecting to Cassandra clusters. Fixed in 1.6.4 and 1.7.1

HashiCorp Vault and Vault Enterprise Cassandra integrations (storage backend and database secrets engine plugin) did not validate TLS certificates when connecting to Cassandra clusters. Fixed in 1.6.4 and 1.7.1

Ссылки

EPSS

Процентиль: 46%

0.00235

Низкий

CVE ID

Дефекты

CWE-295

Связанные уязвимости

CVE-2021-27400

CVSS3: 7.5

redhat

почти 5 лет назад

HashiCorp Vault and Vault Enterprise Cassandra integrations (storage backend and database secrets engine plugin) did not validate TLS certificates when connecting to Cassandra clusters. Fixed in 1.6.4 and 1.7.1

CVE-2021-27400

CVSS3: 7.5

nvd

почти 5 лет назад

HashiCorp Vault and Vault Enterprise Cassandra integrations (storage backend and database secrets engine plugin) did not validate TLS certificates when connecting to Cassandra clusters. Fixed in 1.6.4 and 1.7.1

EPSS

Процентиль: 46%

0.00235

Низкий

CVE ID

Дефекты

CWE-295