CVE-2021-28156 log

Severity Medium
Remote Yes
Type Access restriction bypass
A vulnerability was identified in Consul Enterprise version 1.8.0 up to version 1.9.4 where a crafted endpoint URL could be used to bypass the audit log. The issue is fixed in versions 1.9.5 and 1.8.10.
Group Package Affected Fixed Severity Status Ticket
AVG-1830 consul 1.9.4-1 Medium Not affected