CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-41805

HashiCorp Consul Enterprise before 1.8.17, 1.9.x before 1.9.11, and 1.10.x before 1.10.4 has Incorrect Access Control. An ACL token (with the default operator:write permissions) in one namespace can be used for unintended privilege escalation in a different namespace.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.068

EPSS Ranking 90.9%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 6.5

References

Products affected by CVE-2021-41805

Hashicorp » Consul » Version: 1.10.0

cpe:2.3:a:hashicorp:consul:1.10.0
Hashicorp » Consul » Version: 1.10.1

cpe:2.3:a:hashicorp:consul:1.10.1
Hashicorp » Consul » Version: 1.10.2

cpe:2.3:a:hashicorp:consul:1.10.2
Hashicorp » Consul » Version: 1.10.3

cpe:2.3:a:hashicorp:consul:1.10.3
Hashicorp » Consul » Version: 1.7.0

cpe:2.3:a:hashicorp:consul:1.7.0
Hashicorp » Consul » Version: 1.7.1

cpe:2.3:a:hashicorp:consul:1.7.1
Hashicorp » Consul » Version: 1.7.10

cpe:2.3:a:hashicorp:consul:1.7.10
Hashicorp » Consul » Version: 1.7.11

cpe:2.3:a:hashicorp:consul:1.7.11
Hashicorp » Consul » Version: 1.7.12

cpe:2.3:a:hashicorp:consul:1.7.12
Hashicorp » Consul » Version: 1.7.13

cpe:2.3:a:hashicorp:consul:1.7.13
Hashicorp » Consul » Version: 1.7.14

cpe:2.3:a:hashicorp:consul:1.7.14
Hashicorp » Consul » Version: 1.7.2

cpe:2.3:a:hashicorp:consul:1.7.2
Hashicorp » Consul » Version: 1.7.3

cpe:2.3:a:hashicorp:consul:1.7.3
Hashicorp » Consul » Version: 1.7.4

cpe:2.3:a:hashicorp:consul:1.7.4
Hashicorp » Consul » Version: 1.7.5

cpe:2.3:a:hashicorp:consul:1.7.5
Hashicorp » Consul » Version: 1.7.6

cpe:2.3:a:hashicorp:consul:1.7.6
Hashicorp » Consul » Version: 1.7.7

cpe:2.3:a:hashicorp:consul:1.7.7
Hashicorp » Consul » Version: 1.7.8

cpe:2.3:a:hashicorp:consul:1.7.8
Hashicorp » Consul » Version: 1.7.9

cpe:2.3:a:hashicorp:consul:1.7.9
Hashicorp » Consul » Version: 1.8.0

cpe:2.3:a:hashicorp:consul:1.8.0
Hashicorp » Consul » Version: 1.8.1

cpe:2.3:a:hashicorp:consul:1.8.1
Hashicorp » Consul » Version: 1.8.10

cpe:2.3:a:hashicorp:consul:1.8.10
Hashicorp » Consul » Version: 1.8.14

cpe:2.3:a:hashicorp:consul:1.8.14
Hashicorp » Consul » Version: 1.8.15

cpe:2.3:a:hashicorp:consul:1.8.15
Hashicorp » Consul » Version: 1.8.16

cpe:2.3:a:hashicorp:consul:1.8.16
Hashicorp » Consul » Version: 1.8.2

cpe:2.3:a:hashicorp:consul:1.8.2
Hashicorp » Consul » Version: 1.8.3

cpe:2.3:a:hashicorp:consul:1.8.3
Hashicorp » Consul » Version: 1.8.4

cpe:2.3:a:hashicorp:consul:1.8.4
Hashicorp » Consul » Version: 1.8.5

cpe:2.3:a:hashicorp:consul:1.8.5
Hashicorp » Consul » Version: 1.8.6

cpe:2.3:a:hashicorp:consul:1.8.6
Hashicorp » Consul » Version: 1.8.7

cpe:2.3:a:hashicorp:consul:1.8.7
Hashicorp » Consul » Version: 1.8.8

cpe:2.3:a:hashicorp:consul:1.8.8
Hashicorp » Consul » Version: 1.8.9

cpe:2.3:a:hashicorp:consul:1.8.9
Hashicorp » Consul » Version: 1.9.0

cpe:2.3:a:hashicorp:consul:1.9.0
Hashicorp » Consul » Version: 1.9.1

cpe:2.3:a:hashicorp:consul:1.9.1
Hashicorp » Consul » Version: 1.9.10

cpe:2.3:a:hashicorp:consul:1.9.10
Hashicorp » Consul » Version: 1.9.2

cpe:2.3:a:hashicorp:consul:1.9.2
Hashicorp » Consul » Version: 1.9.3

cpe:2.3:a:hashicorp:consul:1.9.3
Hashicorp » Consul » Version: 1.9.4

cpe:2.3:a:hashicorp:consul:1.9.4
Hashicorp » Consul » Version: 1.9.5

cpe:2.3:a:hashicorp:consul:1.9.5
Hashicorp » Consul » Version: 1.9.6

cpe:2.3:a:hashicorp:consul:1.9.6
Hashicorp » Consul » Version: 1.9.7

cpe:2.3:a:hashicorp:consul:1.9.7
Hashicorp » Consul » Version: 1.9.8

cpe:2.3:a:hashicorp:consul:1.9.8
Hashicorp » Consul » Version: 1.9.9

cpe:2.3:a:hashicorp:consul:1.9.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-41805

Products

Pricing

Contact Us