Site icon API Security Blog

Linux Distros Unpatched Vulnerability : CVE-2021-41803

image
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. HashiCorp Consul 1.8.1 up to 1.11.8, 1.12.4, and 1.13.1 do not properly validate the node or segment names prior to interpolation and usage in JWT claim assertions with the auto config RPC. Fixed in 1.11.9, 1.12.5, and 1.13.2. (CVE-2021-41803) Note that Nessus relies on the presence of the package as reported by the…Read More

Exit mobile version