CVE-2021-41805

Name
CVE-2021-41805
Description
HashiCorp Consul Enterprise before 1.8.17, 1.9.x before 1.9.11, and 1.10.x before 1.10.4 has Incorrect Access Control. An ACL token (with the default operator:write permissions) in one namespace can be used for unintended privilege escalation in a different namespace.
NVD Severity
high
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
MISC https://www.hashicorp.com/blog/category/consul
MISC https://discuss.hashicorp.com/t/hcsec-2021-29-consul-enterprise-namespace-default-acls-allow-privilege-escalation/31871
CONFIRM https://security.netapp.com/advisory/ntap-20211229-0007/

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:hashicorp:consul:*:*:*:*:enterprise:*:*:* consul >= 1.7.0 < 1.8.17
cpe:2.3:a:hashicorp:consul:*:*:*:*:enterprise:*:*:* consul >= 1.9.0 < 1.9.11
cpe:2.3:a:hashicorp:consul:*:*:*:*:enterprise:*:*:* consul >= 1.10.0 < 1.10.4

Vulnerable and fixed packages

Source package Branch Version Maintainer Status