← Database

CVE-2021-38553

MEDIUM CVSS: 4.4 Published: 2021-08-13 Modified: 2026-06-17

Description

HashiCorp Vault and Vault Enterprise 1.4.0 through 1.7.3 initialized an underlying database file associated with the Integrated Storage feature with excessively broad filesystem permissions. Fixed in Vault and Vault Enterprise 1.8.0.

Affected Platforms

Hashicorp Vault

Weakness Type

CWE-281

References