CVE-2021-41805

HashiCorp Consul Enterprise before 1.8.17, 1.9.x before 1.9.11, and 1.10.x before 1.10.4 has Incorrect Access Control

published December 12, 2021

CVSS
—
EPSS
35%
Percentile
98.4
In the wild
Unconfirmed
What it is

HashiCorp Consul Enterprise before 1.8.17, 1.9.x before 1.9.11, and 1.10.x before 1.10.4 has Incorrect Access Control. An ACL token (with the default operator:write permissions) in one namespace can be used for unintended privilege escalation in a different namespace.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.34790 · 98.4th percentile
Published
2021-12-12T04:51Z
EPSS history
Timeline
  • 12 DEC 04:51Z
    HashiCorp Consul Enterprise before 1.8.17, 1.9.x before 1.9.11, and 1.10.x before 1.10.4 has Incorrect Access Control
    cvelistv5