The vulnerability of the Consul and Consul Enterprise service configuration tool, related to unvalidated returned values, allows attackers to circumvent established security restrictions.

Consul and Consul tool have unvalidated returned values enabling attackers to bypass security.

Reporter	Title	Published	Views	Family All 57
AlpineLinux	CVE-2022-40716	23 Sep 202200:00	–	alpinelinux
Chainguard	CVE-2022-40716 vulnerabilities	23 Sep 202212:15	–	cgr
Circl	CVE-2022-40716	23 Sep 202216:28	–	circl
CNNVD	HashiCorp Consul 安全漏洞	23 Sep 202200:00	–	cnnvd
CVE	CVE-2022-40716	23 Sep 202200:00	–	cve
Cvelist	CVE-2022-40716	23 Sep 202200:00	–	cvelist
Debian CVE	CVE-2022-40716	23 Sep 202200:00	–	debiancve
EUVD	EUVD-2022-6870	3 Oct 202520:07	–	euvd
Fedora	[SECURITY] Fedora 38 Update: moby-engine-24.0.5-1.fc38	30 Aug 202301:37	–	fedora
Fedora	[SECURITY] Fedora 37 Update: moby-engine-24.0.5-1.fc37	5 Sep 202300:47	–	fedora

Vulners

Node

hashicorp consulRange1.12.0–1.12.5

hashicorp consulRange1.13.0–1.13.2

Source	Link
redos	www.redos.red-soft.ru/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-consul-cve-2022-40716-cve-2022-3920/
discuss	www.discuss.hashicorp.com/t/hcsec-2022-20-consul-service-mesh-intention-bypass-with-malicious-certificate-signing-request/44628
security-tracker	www.security-tracker.debian.org/tracker/CVE-2022-40716
access	www.access.redhat.com/security/cve/CVE-2022-40716
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LYZOKMMVX4SIEHPJW3SJUQGMO5YZCPHC/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZTE4ITXXPIWZEQ4HYQCB6N6GZIMWXDAI/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XNF4OLYZRQE75EB5TW5N42FSXHBXGWFE/
web	www.web.nvd.nist.gov/view/vuln/detail

17 Jul 2025 00:00Current

7High risk

Vulners AI Score7

CVSS 36.5

CVSS 26.8

EPSS0.00849