Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-3282
7.5
HIGHCVSS v3
Published
February 1, 2021
CVSS v2
5 MEDIUM
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
HashiCorp Vault Enterprise 1.6.0 & 1.6.1 allowed the `remove-peer` raft operator command to be executed against DR secondaries without authentication. Fixed in 1.6.2.
hashicorp/vault
GitHubA tool for secrets management, encryption as a service, and privileged access management
GitHubA tool for secrets management, encryption as a service, and privileged access management= 1.6.0, = 1.6.1NVD