← All advisories

Unrated severityNVD Advisory· Published Apr 20, 2021· Updated Aug 3, 2024

CVE-2021-28156

CVE-2021-28156

Description

HashiCorp Consul Enterprise version 1.8.0 up to 1.9.4 audit log can be bypassed by specifically crafted HTTP events. Fixed in 1.9.5, and 1.8.10.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

HashiCorp/Consul Enterprisedescription
Hashicorp/Consul Enterprisellm-fuzzy
Range: >=1.8.0, <=1.9.4
osv-coords
pkg:bitnami/consul
Range: >= 1.8.0, < 1.8.10

Patches

Vulnerability mechanics

References

3

security.gentoo.org/glsa/202208-09mitrevendor-advisoryx_refsource_GENTOO
discuss.hashicorp.com/t/hcsec-2021-08-consul-enterprise-audit-log-bypass-for-http-events/23369mitrex_refsource_MISC
www.hashicorp.com/blog/category/consulmitrex_refsource_MISC

News mentions

0

No linked articles in our index yet.