CVE-2021-3282

HIGH · CVSS 7.5 EPSS 1.30%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2021-02-01 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2021-3282

Severity

HIGH

CVSS

7.5

EPSS

1.30%

Original NVD Description

HashiCorp Vault Enterprise 1.6.0 & 1.6.1 allowed the `remove-peer` raft operator command to be executed against DR secondaries without authentication. Fixed in 1.6.2.