DEBIAN-CVE-2021-38698

HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. Fixed in 1.8.15, 1.9.9 and 1.10.2...

CVE-2021-38698 vulnerabilities

Vulnerabilities for packages: k3d...

CVE-2021-38698 vulnerabilities

Vulnerabilities for packages: k3d...

CVE-2021-38698

CVE-2021-38698 affects HashiCorp Consul and Consul Enterprise (Txn.Apply endpoint). The issue allowed a service to register proxies for other services, enabling access to service traffic. Root cause: missing authorization check on Txn.Apply path permitted cross-service proxy registration. Impact ...