Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2021-28156

Опубликовано: 20 апр. 2021
Источник: debian

Описание

HashiCorp Consul Enterprise version 1.8.0 up to 1.9.4 audit log can be bypassed by specifically crafted HTTP events. Fixed in 1.9.5, and 1.8.10.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
consulnot-affectedpackage

Примечания

  • https://bugzilla.redhat.com/show_bug.cgi?id=1950492

  • https://github.com/hashicorp/consul/pull/10030

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 5 лет назад

HashiCorp Consul Enterprise version 1.8.0 up to 1.9.4 audit log can be bypassed by specifically crafted HTTP events. Fixed in 1.9.5, and 1.8.10.

CVSS3: 7.5
redhat
больше 5 лет назад

HashiCorp Consul Enterprise version 1.8.0 up to 1.9.4 audit log can be bypassed by specifically crafted HTTP events. Fixed in 1.9.5, and 1.8.10.

CVSS3: 7.5
nvd
больше 5 лет назад

HashiCorp Consul Enterprise version 1.8.0 up to 1.9.4 audit log can be bypassed by specifically crafted HTTP events. Fixed in 1.9.5, and 1.8.10.

CVSS3: 7.5
github
больше 4 лет назад

HashiCorp Consul Enterprise version 1.8.0 up to 1.9.4 audit log can be bypassed by specifically crafted HTTP events. Fixed in 1.9.5, and 1.8.10.