CVE-2021-41805

HashiCorp Consul Enterprise before 1.8.17, 1.9.x before 1.9.11, and 1.10.x before 1.10.4 has Incorrect Access Control. An ACL token (with the default operator:write permissions) in one namespace can be used for unintended privilege escalation in a different namespace.

CVSS v3.1

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P

EPSS

34.79% chance of exploitation in the next 30 days, 98th percentile

Published

2021-12-12

Updated

2024-08-04

Proof-of-concept exploits (3)

• acfirthh/CVE-2021-418050★ · 2025-01-08
• blackm4c/CVE-2021-418051★ · 2022-12-07
• nelsondurairaj/CVE-2021-418051★ · 2022-12-07

References

• CVE Record
• NVD entry

Related

• CVE-2022-26134
• CVE-2021-41794
• CVE-2021-41823
• CVE-2021-4179
• CVE-2021-41825
• CVE-2021-41784