What is CVE-2021-27400?

CVE-2021-27400 is a high-severity vulnerability in Hashicorp Vault, classified under Improper Certificate Validation. CVSS score: 7.5/10. Published 2021-04-22.

How severe is CVE-2021-27400?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Hashicorp Vault

CVE-2021-27400

HashiCorp Vault and Vault Enterprise Cassandra integrations (storage backend and database secrets engine plugin) did not validate TLS certificates when connecting to Cassandra clusters. Fixed in 1.6.4 and 1.7.1

Vulnerability class: Improper Certificate Validation

EPSS: 0.006 (43.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.

Affected products

Hashicorp Vault
N/a — versions n/a

Weakness classification (CWE)

CWE-295 — Improper Certificate Validation

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2021-27400?: CVE-2021-27400 is a high-severity vulnerability in Hashicorp Vault, classified under Improper Certificate Validation. CVSS score: 7.5/10. Published 2021-04-22.
How severe is CVE-2021-27400?: High severity. CVSS v3 base score is 7.5 out of 10.