CVE-2021-41805

HIGH8.8EPSS 4.4%
發布日:2024/3/6修改日:2025/4/3
也稱為:BIT-consul-2021-41805

描述

HashiCorp Consul Enterprise before 1.8.17, 1.9.x before 1.9.11, and 1.10.x before 1.10.4 has Incorrect Access Control. An ACL token (with the default operator:write permissions) in one namespace can be used for unintended privilege escalation in a different namespace.

受影響套件(1)

  • Bitnami/consul>= 1.7.0, < 1.8.17, >= 1.9.0, < 1.9.11, >= 1.10.0, < 1.10.4

CVSS 分數

來源版本嚴重程度向量
osvCVSS 3.1HIGH8.8CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

參考連結(4)