---

CVE-2021-37219 - log back

CVE-2021-37219 edited at 09 Sep 2021 12:38:23
Severity	- Unknown + High
Remote	- Unknown + Remote
Type	- Unknown + Privilege escalation
Description	+ In HashiCorp Consul before version 1.10.2, the Raft RPC layer allows non-server agents with a valid certificate signed by the same CA to access server-only functionality, enabling privilege escalation.
References	+ https://discuss.hashicorp.com/t/hcsec-2021-22-consul-raft-rpc-privilege-escalation/29024
Notes

CVE-2021-37219 created at 09 Sep 2021 12:37:39