Lucene search

Debian Security Bug TrackerDEBIANCVE:CVE-2023-3518

HistoryAug 09, 2023 - 4:15 p.m.

CVE-2023-3518

2023-08-0916:15:09

Debian Security Bug Tracker

security-tracker.debian.org

hashicorp

consul

enterprise

1.16.0

jwt auth

vulnerability

service mesh

CVSS3

7.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

EPSS

0.001

Percentile

31.1%

JSON

HashiCorp Consul and Consul Enterprise 1.16.0 when using JWT Auth for service mesh incorrectly allows/denies access regardless of service identities. Fixed in 1.16.1.

OSVersionArchitecturePackageVersionFilename
Debian11allconsul< 1.8.7+dfsg1-2consul_1.8.7+dfsg1-2_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	11	all	consul	< 1.8.7+dfsg1-2	consul_1.8.7+dfsg1-2_all.deb