CVE-2021-38698

HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. Fixed in 1.8.15, 1.9.9 and 1.10.2...

Linux Distros Unpatched Vulnerability : CVE-2021-38698

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic...

CVE-2021-38698

HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. Fixed in 1.8.15, 1.9.9 and 1.10.2...

CVE-2021-38698 vulnerabilities

Vulnerabilities for packages: k3d...

DEBIAN-CVE-2021-38698

HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. Fixed in 1.8.15, 1.9.9 and 1.10.2...

CVE-2021-38698 vulnerabilities

Vulnerabilities for packages: k3d...

CVE-2021-38698

CVE-2021-38698 affects HashiCorp Consul and Consul Enterprise (Txn.Apply endpoint). The issue allowed a service to register proxies for other services, enabling access to service traffic. Root cause: missing authorization check on Txn.Apply path permitted cross-service proxy registration. Impact ...