CVE-2021-3282
published 2021-02-01CVE-2021-3282: HashiCorp Vault Enterprise 1.6.0 & 1.6.1 allowed the `remove-peer` raft operator command to be executed against DR secondaries without authentication. Fixed in…
PriorityP344high7.5CVSS 3.1
AVNACLPRNUINSUCNIHAN
EPSS
1.30%
66.8th percentile
HashiCorp Vault Enterprise 1.6.0 & 1.6.1 allowed the `remove-peer` raft operator command to be executed against DR secondaries without authentication. Fixed in 1.6.2.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| github.com | hashicorp_vault | >= 1.6.0 < 1.6.2 | 1.6.2 |
| hashicorp | vault | — | — |
| hashicorp | vault | — | — |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
vault: Vault Enterprise’s DR Secondaries Allowed Raft Peer Removal Without Authentication
vendor_redhat·2021-02-01·CVSS 7.5
CVE-2021-3282 [HIGH] CWE-287 vault: Vault Enterprise’s DR Secondaries Allowed Raft Peer Removal Without Authentication
vault: Vault Enterprise’s DR Secondaries Allowed Raft Peer Removal Without Authentication
HashiCorp Vault Enterprise 1.6.0 & 1.6.1 allowed the `remove-peer` raft operator command to be executed against DR secondaries without authentication. Fixed in 1.6.2.
A flaw was found in HashiCorp Vault Enterprise. This flaw allows a remote attacker to bypass security restrictions caused by a vulnerability in the DR secondaries. An attacker can execute the `remove-peer` raft operator command without authentication by sending a specially-crafted request.
Statement: Red Hat Products are not affected by this CVE as this CVE only affects HashiCorp Vault Enterprise versions.
Package: openshift-logging/logging-loki-rhel9 (Logging Subsystem for Red Hat OpenShift) - Not affected
Package: openshift4/ose-i
OSV
Improper Authentication in HashiCorp Vault in github.com/hashicorp/vault
osv·2024-06-28
CVE-2021-3282 Improper Authentication in HashiCorp Vault in github.com/hashicorp/vault
Improper Authentication in HashiCorp Vault in github.com/hashicorp/vault
Improper Authentication in HashiCorp Vault in github.com/hashicorp/vault
OSV
Improper Authentication in HashiCorp Vault
osv·2024-01-31
CVE-2021-3282 [HIGH] Improper Authentication in HashiCorp Vault
Improper Authentication in HashiCorp Vault
HashiCorp Vault Enterprise 1.6.0 & 1.6.1 allowed the `remove-peer` raft operator command to be executed against DR secondaries without authentication. Fixed in 1.6.2.
GHSA
Improper Authentication in HashiCorp Vault
ghsa·2024-01-31
CVE-2021-3282 [HIGH] CWE-287 Improper Authentication in HashiCorp Vault
Improper Authentication in HashiCorp Vault
HashiCorp Vault Enterprise 1.6.0 & 1.6.1 allowed the `remove-peer` raft operator command to be executed against DR secondaries without authentication. Fixed in 1.6.2.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://discuss.hashicorp.com/t/hcsec-2021-04-vault-enterprise-s-dr-secondaries-allowed-raft-peer-removal-without-authentication/20337https://security.gentoo.org/glsa/202207-01https://discuss.hashicorp.com/t/hcsec-2021-04-vault-enterprise-s-dr-secondaries-allowed-raft-peer-removal-without-authentication/20337https://security.gentoo.org/glsa/202207-01
2021-02-01
Published