CVE-2021-28156
HashiCorp Consul Enterprise version 1.8.0 up to 1.9.4 audit log can be bypassed by specifically crafted HTTP events. Fixed in 1.9.5, and 1.8.10.
Description d'origine
La description telle que publiée par la source (souvent en anglais).
HashiCorp Consul Enterprise version 1.8.0 up to 1.9.4 audit log can be bypassed by specifically crafted HTTP events. Fixed in 1.9.5, and 1.8.10.
Paquets affectés
Bitnami
consul
[{"type":"SEMVER","events":[{"introduced":"1.8.0"},{"fixed":"1.8.10"},{"introduced":"1.9.0"},{"fixed":"1.9.5"}]}]
Références
- advisory discuss.hashicorp.com
- advisory security.gentoo.org
- advisory hashicorp.com
- web nvd.nist.gov