CVE-2021-37219: HashiCorp Consul Privilege Escalation Vulnerability
Summary
CVE-2021-37219: HashiCorp Consul Privilege Escalation Vulnerability. Affects github.com/hashicorp/consul across 3 version ranges.
< 1.8.15
>= 1.9.0, < 1.9.9
>= 1.10.1, < 1.10.2
Fixed in 1.8.15, 1.9.9 or 1.10.2, depending on the release line you run. How to fix ↓
Also tracked for
The same CVE-2021-37219 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
HashiCorp Consul is a distributed service mesh and key-value store designed for modern applications. It provides a secure and scalable platform for service discovery, configuration, and orchestration. Consul is written in Go and is widely used in production environments. However, a privilege escalation vulnerability has been discovered in Consul versions 1.8.15, 1.9.9, and 1.10.2.
Vulnerability Detail
The vulnerability, identified as CVE-2021-37219, exists in the Raft RPC layer of HashiCorp Consul and Consul Enterprise. It allows non-server agents with a valid certificate signed by the same CA to access server-only functionality, leading to privilege escalation. This means that an attacker with a compromised agent certificate can gain unauthorized access to sensitive server resources and perform actions that they should not be allowed to. The vulnerability has a CVSS score of 8.8, indicating a high severity level.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
< 1.8.151.8.15go get github.com/hashicorp/consul@v1.8.15 -
>= 1.9.0, < 1.9.91.9.9go get github.com/hashicorp/consul@v1.9.9 -
>= 1.10.1, < 1.10.21.10.2go get github.com/hashicorp/consul@v1.10.2
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
There is no known workaround for this vulnerability. It is crucial to apply the recommended fix by upgrading to the patched versions of HashiCorp Consul.
Conclusion
The privilege escalation vulnerability in HashiCorp Consul can lead to unauthorized access and potential misuse of server resources. It is crucial to upgrade to the latest patched versions of Consul (1.8.15, 1.9.9, or 1.10.2) to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for github.com/hashicorp/consul →
FAQ
HashiCorp Consul is a distributed service mesh and key-value store designed for modern applications. It provides service discovery, configuration, and orchestration capabilities.
The vulnerability allows non-server agents with a valid certificate to access server-only functionality, leading to privilege escalation. This can result in unauthorized access to sensitive server resources and potential malicious actions.
To fix this vulnerability, upgrade to the latest patched versions of HashiCorp Consul: 1.8.15, 1.9.9, or 1.10.2.
No, there is no known workaround for this vulnerability. Upgrading to the patched versions is the recommended solution.
This vulnerability has a CVSS score of 8.8, indicating a high severity level.
References
Related vulnerabilities
Recent vulnerabilities recorded for github.com/hashicorp/consul.
