3 matches found
CVE-2021-30476
HashiCorp Terraform’s Vault Provider terraform-provider-vault did not correctly configure GCE-type bound labels for Vault’s GCP auth method. Fixed in 2.19.1...
9.8CVSS0.01597EPSS
SaveExploits1References2
CVE-2021-30476
HashiCorp Terraform’s Vault Provider (terraform-provider-vault) did not correctly configure GCE-type bound labels for Vault’s GCP auth method, enabling an overly permissive binding. Root cause: misconfiguration in bound labels. Affected version range is not specified in the provided details; reme...
9.8CVSS9.4AI score0.01597EPSS
SaveExploits1References2Affected Software1
CVE-2021-30476: Undefined Security Weakness
HashiCorp Terraform’s Vault Provider terraform-provider-vault did not correctly configure GCE-type bound labels for Vault’s GCP auth method. Fixed in 2.19.1...
9.8CVSS5.7AI score0.01597EPSS
SaveExploits1References1
20