HashiCorp Consul Enterprise version 1.8.0 up to 1.9.4 audit log can be bypassed by specifically crafted HTTP events. Fixed in 1.9.5, and 1.8.10.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2021-04-20T15:02:58
Updated: 2024-08-03T21:40:12.222Z
Reserved: 2021-03-11T00:00:00
Link: CVE-2021-28156
Vulnrichment
No data.
NVD
Status : Modified
Published: 2021-04-20T16:15:10.407
Modified: 2024-11-21T05:59:12.283
Link: CVE-2021-28156
Redhat