1221 matches found
Linux Distros Unpatched Vulnerability : CVE-2019-9764
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Consul 1.4.3 lacks server hostname verification for agent-to-agent TLS communication. In other words, the product behaves as if verifyserverhostname...
Linux Distros Unpatched Vulnerability : CVE-2020-28053
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Consul and Consul Enterprise 1.2.0 up to 1.8.5 allowed operators with operator:read ACL permissions to read the Connect CA private key configuration...
Linux Distros Unpatched Vulnerability : CVE-2021-41805
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Consul Enterprise before 1.8.17, 1.9.x before 1.9.11, and 1.10.x before 1.10.4 has Incorrect Access Control. An ACL token with the default...
Linux Distros Unpatched Vulnerability : CVE-2022-3920
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Consul and Consul Enterprise 1.13.0 up to 1.13.3 do not filter cluster filtering's imported nodes and services for HTTP or RPC endpoints used by the U...
Linux Distros Unpatched Vulnerability : CVE-2023-1297
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Consul and Consul Enterprise's cluster peering implementation contained a flaw whereby a peer cluster with service of the same name as a local service could...
Linux Distros Unpatched Vulnerability : CVE-2020-12797
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Consul and Consul Enterprise failed to enforce changes to legacy ACL token rules due to non- propagation to secondary data centers. Introduced in 1.4....
Linux Distros Unpatched Vulnerability : CVE-2020-13170
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Consul and Consul Enterprise did not appropriately enforce scope for local tokens issued by a primary data center, where replication to a secondary da...
Linux Distros Unpatched Vulnerability : CVE-2020-7955
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Consul and Consul Enterprise 1.4.1 through 1.6.2 did not uniformly enforce ACLs across all API endpoints, resulting in potential unintended informatio...
Linux Distros Unpatched Vulnerability : CVE-2019-12291
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Consul 1.4.0 through 1.5.0 has Incorrect Access Control. Keys not matching a specific ACL rule used for prefix matching in a policy can be deleted by ...
GHSA-99WR-C2PX-GRMH vulnerabilities
Vulnerabilities for packages: consul, consul-fips...
CVE-2024-10005 vulnerabilities
Vulnerabilities for packages: consul, consul-fips...
GHSA-CHGM-7R52-WHJJ vulnerabilities
Vulnerabilities for packages: consul, consul-fips...
GHSA-5C4W-8HHH-3C3H vulnerabilities
Vulnerabilities for packages: consul, consul-fips...
CVE-2024-10086 vulnerabilities
Vulnerabilities for packages: consul, consul-fips...
CVE-2024-10006 vulnerabilities
Vulnerabilities for packages: consul, consul-fips...
Linux Distros Unpatched Vulnerability : CVE-2018-19653
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Consul 0.5.1 through 1.4.0 can use cleartext agent-to-agent RPC communication because the verifyoutgoing setting is improperly documented. NOTE: the...
Linux Distros Unpatched Vulnerability : CVE-2020-13250
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Consul and Consul Enterprise include an HTTP API introduced in 1.2.0 and DNS introduced in 1.4.3 caching feature that was vulnerable to denial of...
Linux Distros Unpatched Vulnerability : CVE-2020-25864
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Consul and Consul Enterprise up to version 1.9.4 key-value KV raw mode was vulnerable to cross-site scripting. Fixed in 1.9.5, 1.8.10 and 1.7.14...
