CVE-2021-28156
HashiCorp Consul Enterprise version 1.8.0 up to 1.9.4 audit log can be bypassed by specifically crafted HTTP events. Fixed in 1.9.5, and 1.8.10.
Original description
The description as published by the source.
HashiCorp Consul Enterprise version 1.8.0 up to 1.9.4 audit log can be bypassed by specifically crafted HTTP events. Fixed in 1.9.5, and 1.8.10.
Affected packages
Bitnami
consul
[{"type":"SEMVER","events":[{"introduced":"1.8.0"},{"fixed":"1.8.10"},{"introduced":"1.9.0"},{"fixed":"1.9.5"}]}]
References
- advisory discuss.hashicorp.com
- advisory security.gentoo.org
- advisory hashicorp.com
- web nvd.nist.gov