vulnerability

FreeBSD: VID-093a6baf-9f99-11eb-b150-000c292ee6b8 (CVE-2021-28156): Consul -- Multiple vulnerabilities

Severity

CVSS

(AV:N/AC:L/Au:N/C:N/I:P/A:N)

Published

Apr 17, 2021

Added

Nov 4, 2022

Modified

Jun 15, 2026

Description

HashiCorp Consul Enterprise version 1.8.0 up to 1.9.4 audit log can be bypassed by specifically crafted HTTP events. Fixed in 1.9.5, and 1.8.10.

freebsd-upgrade-package-consul

Rapid7 Labs

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.