Lucene search
GoogleOSV:BIT-CONSUL-2023-3518HistoryMar 06, 2024 - 10:51 a.m.
BIT-consul-2023-3518
2024-03-0610:51:07
Google
osv.dev
7
hashicorp
consul
enterprise
1.16.0
jwt auth
service mesh
access
identity
vulnerability
fixed
HashiCorp Consul and Consul Enterprise 1.16.0 when using JWT Auth for service mesh incorrectly allows/denies access regardless of service identities. Fixed in 1.16.1.
| CPE | Name | Operator | Version |
|---|---|---|---|
| consul | le | 1.16.0-rc1 | |
| consul | ge | 1.16.0-rc1 | |
| consul | ge | 1.16.0 | |
| consul | le | 1.16.0 |
Related
debiancve
debiancve
CVE-2023-3518
2023-08-09 16:15:09
cgr
cgr
CVE-2023-3518 vulnerabilities
2024-05-19 03:07:16
cve
cve
CVE-2023-3518
2023-08-09 16:15:09
osv
osv
CVE-2023-3518
2023-08-09 16:15:09
github
github
prion
prion
Design/Logic Flaw
2023-08-09 16:15:00
cvelist
cvelist
wolfi
wolfi
CVE-2023-3518 vulnerabilities
2024-05-25 15:44:38