logo

Database

Authentication mechanism absence or evasion In github.com/hashicorp/consul/acl

Description

Incorrect Authorization

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. CVE-2021-418052. NVD-2021-418053. OSV-2021-418054. GCVE-2021-41805

References

1. https://www.hashicorp.com/blog/category/consul2. https://discuss.hashicorp.com/t/hcsec-2021-29-consul-enterprise-namespace-default-acls-allow-privilege-escalation/318713. https://github.com/blackm4c/CVE-2021-418054. https://security.netapp.com/advisory/ntap-20211229-0007/

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.