← All advisories

High severity7.5NVD Advisory· Published Apr 20, 2021· Updated Jun 17, 2026

CVE-2021-28156

CVE-2021-28156

Description

HashiCorp Consul Enterprise version 1.8.0 up to 1.9.4 audit log can be bypassed by specifically crafted HTTP events. Fixed in 1.9.5, and 1.8.10.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

HashiCorp/Consul Enterprisedescription
Hashicorp/Consul
cpe:2.3:a:hashicorp:consul:*:*:*:*:enterprise:*:*:*
Range: >=1.8.0,<1.8.10
Hashicorp/Consul Enterprisellm-fuzzy
Range: 1.8.0 - 1.9.4
osv-coords
pkg:bitnami/consul
Range: >= 1.8.0, < 1.8.10

Patches

Vulnerability mechanics

References

3

discuss.hashicorp.com/t/hcsec-2021-08-consul-enterprise-audit-log-bypass-for-http-events/23369nvdVendor Advisory
security.gentoo.org/glsa/202208-09nvdThird Party Advisory
www.hashicorp.com/blog/category/consulnvdVendor Advisory

News mentions

0

No linked articles in our index yet.