7.5

CVE-2021-36213

HashiCorp Consul and Consul Enterprise 1.9.0 through 1.10.0 default deny policy with a single L7 application-aware intention deny action cancels out, causing the intention to incorrectly fail open, allowing L4 traffic. Fixed in 1.9.8 and 1.10.1.

Data is provided by the National Vulnerability Database (NVD)
Hashicorp ≫ Consul SwEdition- Version >= 1.9.0 < 1.9.8
Hashicorp ≫ Consul SwEditionenterprise Version >= 1.9.0 < 1.9.8
Hashicorp ≫ Consul SwEdition- Version >= 1.10.0 < 1.10.1
Hashicorp ≫ Consul SwEditionenterprise Version >= 1.10.0 < 1.10.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.77% 0.727
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:P/A:N