CVE-2021-41805
HIGHHashiCorp Consul Enterprise < 1.8.17, 1.9.x < 1.9.11, 1.10.x < 1.10.4 - Incorrect Access Control via Namespace ACL Token
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2021-41805. PoCs published by blackm4c, acfirthh.
AI-analyzed exploit summary This exploit leverages CVE-2021-41805, an incorrect access control vulnerability in HashiCorp Consul Enterprise, to achieve remote code execution by registering a malicious service with a reverse shell payload. The exploit uses an ACL token with default operator:write permissions to escalate privileges across namespaces.
Description
HashiCorp Consul Enterprise before 1.8.17, 1.9.x before 1.9.11, and 1.10.x before 1.10.4 has Incorrect Access Control. An ACL token (with the default operator:write permissions) in one namespace can be used for unintended privilege escalation in a different namespace.
Exploits (2)
This exploit leverages CVE-2021-41805, an incorrect access control vulnerability in HashiCorp Consul Enterprise, to achieve remote code execution by registering a malicious service with a reverse shell payload. The exploit uses an ACL token with default operator:write permissions to escalate privileges across namespaces.
This is a functional exploit for CVE-2021-41805, targeting HashiCorp Consul Enterprise. It leverages an ACL token with operator:write permissions to achieve remote code execution via a reverse shell payload.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H