CVE-2021-41805
HashiCorp Consul Enterprise before 1.8.17, 1.9.x before 1.9.11, and 1.10.x before 1.10.4 has Incorrect Access Control. An ACL token (with the default...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
HashiCorp Consul Enterprise before 1.8.17, 1.9.x before 1.9.11, and 1.10.x before 1.10.4 has Incorrect Access Control. An ACL token (with the default operator:write permissions) in one namespace can be used for unintended privilege escalation in a different namespace.
Paquets affectés
Bitnami
consul
[{"type":"SEMVER","events":[{"introduced":"1.7.0"},{"fixed":"1.8.17"},{"introduced":"1.9.0"},{"fixed":"1.9.11"},{"introduced":"1.10.0"},{"fixed":"1.10.4"}]}]
Références
- advisory discuss.hashicorp.com
- advisory security.netapp.com
- advisory hashicorp.com
- web nvd.nist.gov