Skip to content
OpenAdvisories
Unscored CVE-2021-45042 EUVD-2021-31839GHSA-cr6r-4g38-f69g

In HashiCorp Vault and Vault Enterprise before 1.7.7, 1.8.x before 1.8.6, and 1.9.x before 1.9.1, clusters using the Integrated Storage bac…

Published Dec 17, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

In HashiCorp Vault and Vault Enterprise before 1.7.7, 1.8.x before 1.8.6, and 1.9.x before 1.9.1, clusters using the Integrated Storage backend allowed an authenticated user (with write permissions to a kv secrets engine) to cause a panic and denial of service of the storage backend. The earliest affected version is 1.4.0.

References