In HashiCorp Vault and Vault Enterprise before 1.7.7, 1.8.x before 1.8.6, and 1.9.x before 1.9.1, clusters using the Integrated Storage backend allowed an authenticated user (with write permissions to a kv secrets engine) to cause a panic and denial of service of the storage backend. The earliest affected version is 1.4.0.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2021-12-17T13:38:51
Updated: 2024-08-04T04:32:13.617Z
Reserved: 2021-12-13T00:00:00
Link: CVE-2021-45042
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2021-12-17T14:15:07.667
Modified: 2022-09-08T21:42:09.307
Link: CVE-2021-45042
Redhat