DirectorySecurity Advisories
Sign In
Security Advisories

CGA-qgh6-gr3q-8jp4

Published

Last updated

https://images.chainguard.dev/security/CGA-qgh6-gr3q-8jp4
Package

k3d

Latest Update
Fixed
Fixed Version

5.6.0-r11

Aliases
  • CVE-2021-37219
  • GHSA-ccw8-7688-vqx4

Severity

8.8

High

CVSS V3

Summary

HashiCorp Consul Privilege Escalation Vulnerability

Description

HashiCorp Consul and Consul Enterprise 1.10.1 Raft RPC layer allows non-server agents with a valid certificate signed by the same CA to access server-only functionality, enabling privilege escalation. Fixed in 1.8.15, 1.9.9 and 1.10.2.

References

Updates

Safe Source for Open Source™
Media KitContact Us
© 2024 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard Images

Why Chainguard

Container Image SecurityVulnerability RemediationCompliance and Risk MitigationSoftware Supply Chain SecurityAI/ML Security

Customers

Customer StoriesChainguard Love

Company

About UsOpen SourceCareersNewsroomLegal

Resources

Unchained BlogResearchEventsTrust CenterDocumentation