CVE-2021-30476

2021-04-2217:15:07

Google

osv.dev

6.9 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.2%

JSON

HashiCorp Terraform’s Vault Provider (terraform-provider-vault) did not correctly configure GCE-type bound labels for Vault’s GCP auth method. Fixed in 2.19.1.

CPENameOperatorVersion
terraform-provider-vaulteq2.14.0
terraform-provider-vaulteq2.16.0
terraform-provider-vaulteq2.6.0
terraform-provider-vaulteq2.1.0
terraform-provider-vaulteq2.9.0
terraform-provider-vaulteq2.12.1
terraform-provider-vaulteq1.1.1
terraform-provider-vaulteq2.12.2
terraform-provider-vaulteq1.8.0
terraform-provider-vaulteq1.5.0

Name	Operator	Version
terraform-provider-vault	eq	2.14.0
terraform-provider-vault	eq	2.16.0
terraform-provider-vault	eq	2.6.0
terraform-provider-vault	eq	2.1.0
terraform-provider-vault	eq	2.9.0
terraform-provider-vault	eq	2.12.1
terraform-provider-vault	eq	1.1.1
terraform-provider-vault	eq	2.12.2
terraform-provider-vault	eq	1.8.0
terraform-provider-vault	eq	1.5.0