HashiCorp Vault and Vault Enterprise Cassandra integrations (storage backend and database secrets engine plugin) did not validate TLS certificates when connecting to Cassandra clusters. Fixed in 1.6.4 and 1.7.1
2021-04-22T17:15:07.723
2024-11-21T05:57:55.137
Modified
CVSSv3.1: 7.5 (HIGH)
AV:N/AC:L/Au:N/C:N/I:P/A:N
10.0
2.9
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | hashicorp | vault | < 1.6.4 | Yes |
Application | hashicorp | vault | < 1.6.4 | Yes |
Application | hashicorp | vault | < 1.7.1 | Yes |
Application | hashicorp | vault | < 1.7.1 | Yes |