VDB
CVE-2021-38553
CVE-2021-38553
PUBLISHED
CVSS 4.400000095367432 MEDIUM
HashiCorp Vault and Vault Enterprise 1.4.0 through 1.7.3 initialized an underlying database file associated with the Integrated Storage feature with excessively broad filesystem permissions. Fixed in Vault and Vault Enterprise 1.8.0.
EPSS 0.27% · 18.3th percentile
Risk Scores
CVSS 3.1
4.400000095367432
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
EPSS Score
0.27%
18.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | vault | 1.4.0 |
| Bitnami | vault | 1.4.0 |
Timeline
- Aug 13, 2021 CVE Published
- Aug 14, 2021 EPSS Score
- Aug 30, 2021 CVE Updated
- Oct 12, 2021 EPSS Score
- Dec 10, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 8, 2022 EPSS Score
- Apr 8, 2022 EPSS Score
- Jun 6, 2022 EPSS Score
- Aug 5, 2022 EPSS Score
- Oct 3, 2022 EPSS Score
- Dec 1, 2022 EPSS Score