CVE-2021-28156 in Consul Enterprise

Riassunto

di MITRE • 22/04/2021

HashiCorp Consul Enterprise version 1.8.0 up to 1.9.4 audit log can be bypassed by specifically crafted HTTP events. Fixed in 1.9.5, and 1.8.10.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Prenotare: 11/03/2021
• Divulgazione: 22/04/2021
• Moderazione: accettato
• Voce: VDB-173306
• CPE: pronto
• CWE: Sconosciuto
• CVSS: 7.5 (NVD)
• EPSS: 0.02273
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2021-28156
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-28156
• CVE Details: https://www.cvedetails.com/cve/CVE-2021-28156/