CVE-2021-38698: GO-2022-0559 - HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to

CVE-2021-38698 · Severity: low · CVSS 3.1 · Published 2024-08-21

Technologies: github.com/hashicorp/consul (Go). Vendors: Go.

Executive brief

HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

Affected products

Go github.com/hashicorp/consul

Related threats

GO-2026-4690 - Consul is vulnerable to arbitrary file read when configured with Kubernetes authentication in github.com/hashicorp/consul
GO-2025-4081 - Consul key/value endpoint is vulnerable to denial of service in github.com/hashicorp/consul
GO-2025-4082 - Consul event endpoint is vulnerable to denial of service in github.com/hashicorp/consul
GO-2024-3242 - Hashicorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul
GO-2024-3243 - Hashicorp Consul Path Traversal vulnerability in github.com/hashicorp/consul