Security Advisory

CVE-2021-27668

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-08-31 17:01:43
Last updated 2024-08-03 21:26:10
Assigner mitre
State PUBLISHED

Description

HashiCorp Vault Enterprise 0.9.2 through 1.6.2 allowed the read of license metadata from DR secondaries without authentication. Fixed in 1.6.3.