Vulnerabilities > CVE-2021-28156 - Unspecified vulnerability in Hashicorp Consul

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
HIGH
Availability impact
NONE
network
low complexity
hashicorp
NVD
Published: 2021-04-20
Updated: 2022-10-25

Summary

HashiCorp Consul Enterprise version 1.8.0 up to 1.9.4 audit log can be bypassed by specifically crafted HTTP events. Fixed in 1.9.5, and 1.8.10.

Vulnerable Configurations

Part Description Count
Application
Hashicorp
16

References