Proxy Registration Vulnerability in HashiCorp Consul and Consul Enterprise 1.10.1

CVE-2021-38698 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. Fixed in 1.8.15, 1.9.9 and 1.10.2.

Learn more about our Web Application Penetration Testing UK.