Hashicorp Consul Remote Command Execution via Services API

Name: Hashicorp Consul Remote Command Execution via Services API
Keywords: CVE, Hashicorp Consul Remote Command Execution via Services API

Disclosed

Aug 11, 2018

Description

This module exploits Hashicorp Consul's services API to gain remote command
execution on Consul nodes.

Rapid7 Labs

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.