CVE-2021-38698 - log back

CVE-2021-38698 edited at 09 Sep 2021 12:40:28
Severity
- Unknown
+ Medium
Remote
- Unknown
+ Remote
Type
- Unknown
+ Information disclosure
Description
+ In HashiCorp Consul before version 1.10.2, the Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic.
References
+ https://discuss.hashicorp.com/t/hcsec-2021-24-consul-missing-authorization-check-on-txn-apply-endpoint/29026
CVE-2021-38698 created at 09 Sep 2021 12:39:38
Severity
+ Unknown
Remote
+ Unknown
Type
+ Unknown
Description
References
Notes