EUVD-2021-2037

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

HashiCorp Consul allows privilege escalation via Raft RPC layer; fixed in versions 1.8.15, 1.9.9, 1.10.2

Reporter	Title	Published	Views	Family All 49
FreeBSD	consul -- rpc: authorize raft requests	27 Aug 202100:00	–	freebsd
AlpineLinux	CVE-2021-37219	7 Sep 202112:15	–	alpinelinux
AstraLinux	Astra Linux - уязвимость в consul	20 May 202605:53	–	astralinux
Chainguard	CVE-2021-37219 vulnerabilities	7 Sep 202112:15	–	cgr
Circl	CVE-2021-37219	7 Sep 202116:17	–	circl
CNNVD	HashiCorp Consul 信任管理问题漏洞	7 Sep 202100:00	–	cnnvd
CVE	CVE-2021-37219	7 Sep 202111:33	–	cve
Cvelist	CVE-2021-37219	7 Sep 202111:33	–	cvelist
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOps	5 Jul 202318:23	–	ibm
Debian CVE	CVE-2021-37219	7 Sep 202111:33	–	debiancve

[
  {
    "enisaIdVendor": [
      {
        "id": "8eab40e2-7f99-3987-9478-e7526e731e41",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "4a953dfb-3610-343b-aa71-21f03a965457",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-37219
github	www.github.com/hashicorp/consul/pull/10925
github	www.github.com/hashicorp/consul/commit/3357e57dac9aadabd476f7a14973e47f003c4cf0
github	www.github.com/hashicorp/consul/commit/473edd1764b6739e2e4610ea5dede4c2bc6009d1
github	www.github.com/hashicorp/consul/commit/ccf8eb1947357434eb6e66303ddab79f4c9d4103
discuss	www.discuss.hashicorp.com/t/hcsec-2021-22-consul-raft-rpc-privilege-escalation/29024
github	www.github.com/hashicorp/consul
security	www.security.gentoo.org/glsa/202207-01
hashicorp	www.hashicorp.com/blog/category/consul
security	www.security.archlinux.org/CVE-2021-37219

07 Oct 2025 00:30Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.18.8

CVSS 26.5

EPSS0.00428