blackm4c/CVE-2021-41805

PoC

HashiCorp Consul exploit with python. (CVE-2021-41805)

view exploit source poc_in_githubauthor blackm4cpublished 2022-12-07catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2021-41805US	high8.8OT high	34.8% (98th)	Exploit	2021-12-12
HashiCorp Consul Enterprise before 1.8.17, 1.9.x before 1.9.11, and 1.10.x before 1.10.4 has Incorrect Access Control. An ACL token (with the default operator:write permissions) in…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.