CVE-2021-28156

HashiCorp Consul Enterprise version 1.8.0 up to 1.9.4 audit log can be bypassed by specifically crafted HTTP events

published April 20, 2021

CVSS
—
EPSS
2%
Percentile
83.1
In the wild
Unconfirmed
What it is

HashiCorp Consul Enterprise version 1.8.0 up to 1.9.4 audit log can be bypassed by specifically crafted HTTP events. Fixed in 1.9.5, and 1.8.10.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02292 · 83.1th percentile
Published
2021-04-20T15:02Z
EPSS history
Timeline
  • 20 APR 15:02Z
    HashiCorp Consul Enterprise version 1.8.0 up to 1.9.4 audit log can be bypassed by specifically crafted HTTP events
    cvelistv5