CVE-2021-32574

Published: 2021-07-17T18:15Z

Last Modified: 2024-11-21T06:07Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

HashiCorp Consul and Consul Enterprise 1.3.0 through 1.10.0 Envoy proxy TLS configuration does not validate destination service identity in the encoded subject alternative name. Fixed in 1.8.14, 1.9.8, and 1.10.1. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt