CVE-2021-38698

—

CVSS 3.1

6.5 medium

EPSS

2%p73

Published

Sep 7, 2021 (Sep 7, 2021)

Modified

Jun 17, 2026

Description

HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. Fixed in 1.8.15, 1.9.9 and 1.10.2.

Vendors: hashicorp
Products: consul
Weakness: CWE-862
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news0 stories

No ingested article mentions this CVE yet.