CVE-2021-41803
EUVD-2022-684123.09.2022, 01:15
HashiCorp Consul 1.8.1 up to 1.11.8, 1.12.4, and 1.13.1 do not properly validate the node or segment names prior to interpolation and usage in JWT claim assertions with the auto config RPC. Fixed in 1.11.9, 1.12.5, and 1.13.2."Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| hashicorp | consul | 1.8.1 ≤ 𝑥 < 1.11.9 |
| hashicorp | consul | 1.8.1 ≤ 𝑥 < 1.11.9 |
| hashicorp | consul | 1.12.4 |
| hashicorp | consul | 1.12.4 |
| hashicorp | consul | 1.13.1 |
| hashicorp | consul | 1.13.1 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Common Weakness Enumeration
References