CVE-2021-27400

2021-04-22T17:15:00
ID CVE-2021-27400
Type cve
Reporter cve@mitre.org
Modified 2021-04-27T20:36:00

Description

HashiCorp Vault and Vault Enterprise Cassandra integrations (storage backend and database secrets engine plugin) did not validate TLS certificates when connecting to Cassandra clusters. Fixed in 1.6.4 and 1.7.1