cve.bz

CVE-2021-32574

7.5 highEPSS 1.5%

High (7.5) in hashicorp consul. EPSS 1.5% chance of exploitation in the next 30 days. Fixed in github.com/hashicorp/consul 1.10.1.

HashiCorp Consul and Consul Enterprise 1.3.0 through 1.10.0 Envoy proxy TLS configuration does not validate destination service identity in the encoded subject alternative name. Fixed in 1.8.14, 1.9.8, and 1.10.1.

Severity

CVSS 3.1

7.5 high
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS
1.5% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-10-31)
CWE
CWE-295
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-25gf-8qrr-g78rGogithub.com/hashicorp/consul<1.10.11.10.1
GO-2022-0894Gogithub.com/hashicorp/consul<1.10.11.10.1

References

Check your stackJSON