CVE-2021-27400

HIGH 7.5CVE-2021-27400 · Published 22/04/2021 · updated 17/06/2026

In short

CVE-2021-27400 is a HIGH (CVSS 7.5) vulnerability affecting vault (hashicorp).
Chance of exploitation in the next 30 days (EPSS): 0.57%, higher than 47.1% of all vulnerabilities.
Fix: update to 1.7.1, 1.6.4 or later.

Package	Affected versions	Patched versions
vault hashicorp	`≥ 1.7.0, < 1.7.1< 1.6.4`	`1.7.11.6.4`

Description

HashiCorp Vault and Vault Enterprise Cassandra integrations (storage backend and database secrets engine plugin) did not validate TLS certificates when connecting to Cassandra clusters. Fixed in 1.6.4 and 1.7.1

References

discuss.hashicorp.com/t/hcsec-2021-10-vault-s-cassandra-integrations-did-not-validate-tls-certificates/23463 · Vendor Advisory

More vulnerabilities in vault

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

vault

hashicorp

≥ 1.7.0, < 1.7.1< 1.6.4

1.7.11.6.4

More vulnerabilities in vault

See all →