Security Advisory

CVE-2021-28156

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-04-20 15:02:58

Last updated 2024-08-03 21:40:12

Assigner mitre

State PUBLISHED

HashiCorp Consul Enterprise version 1.8.0 up to 1.9.4 audit log can be bypassed by specifically crafted HTTP events. Fixed in 1.9.5, and 1.8.10.