CVE-2021-41803
23.09.2022, 01:15
HashiCorp Consul 1.8.1 up to 1.11.8, 1.12.4, and 1.13.1 do not properly validate the node or segment names prior to interpolation and usage in JWT claim assertions with the auto config RPC. Fixed in 1.11.9, 1.12.5, and 1.13.2."Enginsight
| Vendor | Product | Version |
|---|---|---|
| hashicorp | consul | 1.8.1 ≤ 𝑥 < 1.11.9 |
| hashicorp | consul | 1.8.1 ≤ 𝑥 < 1.11.9 |
| hashicorp | consul | 1.12.4 |
| hashicorp | consul | 1.12.4 |
| hashicorp | consul | 1.13.1 |
| hashicorp | consul | 1.13.1 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Common Weakness Enumeration
References