Lucene search

K
prionPRIOn knowledge basePRION:CVE-2019-9764
HistoryMar 26, 2019 - 2:29 p.m.

Design/Logic Flaw

2019-03-2614:29:00
PRIOn knowledge base
www.prio-n.com
3

7.3 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.3%

HashiCorp Consul 1.4.3 lacks server hostname verification for agent-to-agent TLS communication. In other words, the product behaves as if verify_server_hostname were set to false, even when it is actually set to true. This is fixed in 1.4.4.

CPENameOperatorVersion
consuleq1.4.3

7.3 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.3%