Em resumo
- CVE-2021-37219 é uma vulnerabilidade ALTO (CVSS 8.8) que afeta github.com/hashicorp/consul, consul (hashicorp).
- Chance de exploração nos próximos 30 dias (EPSS): 1.1%, maior que 66.9% das vulnerabilidades.
- Correção: atualize para 1.10.2, 1.9.9, 1.8.15 ou posterior.
| Package | Affected versions | Patched versions |
|---|
| github.com/hashicorp/consul Go | ≥ 1.10.1, < 1.10.2≥ 1.9.0, < 1.9.9< 1.8.15
| 1.10.21.9.91.8.15
|
| consul | ≥ 1.10.0, < 1.10.2≥ 1.9.0, < 1.9.9< 1.8.15
| 1.10.21.9.91.8.15
|
Description
HashiCorp Consul and Consul Enterprise 1.10.1 Raft RPC layer allows non-server agents with a valid certificate signed by the same CA to access server-only functionality, enabling privilege escalation. Fixed in 1.8.15, 1.9.9 and 1.10.2.
NVD description
HashiCorp Consul and Consul Enterprise 1.10.1 Raft RPC layer allows non-server agents with a valid certificate signed by the same CA to access server-only functionality, enabling privilege escalation. Fixed in 1.8.15, 1.9.9 and 1.10.2.
Mais vulnerabilidades de github.com/hashicorp/consul
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free