CVE-2021-27668

Publication date

2021-08-31 17:01:43

Family

mitre

State

PUBLISHED

Description

HashiCorp Vault Enterprise 0.9.2 through 1.6.2 allowed the read of license metadata from DR secondaries without authentication. Fixed in 1.6.3.