Security Advisory
CVE-2021-38553
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
HashiCorp Vault and Vault Enterprise 1.4.0 through 1.7.3 initialized an underlying database file associated with the Integrated Storage feature with excessively broad filesystem permissions. Fixed in Vault and Vault Enterprise 1.8.0.