1485 matches found
Consul L7 Intentions Vulnerable To URL Path Bypass
Summary A vulnerability was identified in Consul and Consul Enterprise “Consul” such that using URL paths in L7 traffic intentions could bypass HTTP request path-based access rules. This vulnerability, identified as CVE-2024-10005, is fixed in Consul Community Edition 1.20.1 and Consul Enterprise...
HashiCorp Consul 安全漏洞
HashiCorp Consul is a suite of distributed, highly available data center-aware solutions from HashiCorp, USA. The product is used to connect and configure applications across dynamically distributed infrastructures. A security vulnerability exists in HashiCorp Consul that stems from the use of UR...
PT-2024-8323
Name of the Vulnerable Software and Affected Versions Consul versions 1.9.0 through 1.20.0 Description A vulnerability was identified in Consul and Consul Enterprise such that using Headers in L7 traffic intentions could bypass HTTP header based access rules. This could allow a remote attacker to...
HashiCorp Consul 安全漏洞
HashiCorp Consul is a suite of distributed, highly available data center-aware solutions from HashiCorp, USA. The product is used to connect and configure applications across dynamically distributed infrastructures. A security vulnerability exists in HashiCorp Consul that stems from the use of...
CVE-2024-10005: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was identified in Consul and Consul Enterprise “Consul” such that using URL paths in L7 traffic intentions could bypass HTTP request path-based access rules...
HashiCorp Consul 安全漏洞
HashiCorp Consul is a suite of distributed, highly available data center-aware solutions from HashiCorp, USA. The product is used to connect and configure applications across dynamically distributed infrastructures. A security vulnerability exists in HashiCorp Consul that stems from a server...
PT-2024-8623
Name of the Vulnerable Software and Affected Versions Consul versions 1.9.0 through 1.20.1 Description A vulnerability was identified in Consul such that using URL paths in L7 traffic intentions could bypass HTTP request path-based access rules. This issue allows a remote attacker to bypass...
CVE-2024-10006: Improper Neutralization of HTTP Headers for Scripting Syntax
A vulnerability was identified in Consul and Consul Enterprise “Consul” such that using Headers in L7 traffic intentions could bypass HTTP header based access rules...
CVE-2024-10086: Improper Neutralization of Input During Web Page Generation
A vulnerability was identified in Consul and Consul Enterprise such that the server response did not explicitly set a Content-Type HTTP header, allowing user-provided inputs to be misinterpreted and lead to reflected XSS...
PT-2024-8622 · Hashicorp +4 · Hashicorp Consul +5
Name of the Vulnerable Software and Affected Versions: Consul affected versions not specified Consul Enterprise affected versions not specified Description: A vulnerability exists in Consul due to the lack of protection of the web page structure, allowing a remote attacker to conduct a cross-site...
Security Bulletin: A vulnerability in HashiCorp Consul affects IBM Robotic Process Automation and may result in server-side request forgery (CVE-2022-29153).
Summary A vulnerability in HashiCorp Consul affects IBM Robotic Process Automation and may result in server-side request forgery. This bulletin identifies the security fix to apply to address the vulnerability. Vulnerability Details CVEID:CVE-2022-29153 DESCRIPTION: HashiCorp Consul and HashiCorp...
HashiCorp Consul: Multiple Vulnerabilities
Background HashiCorp Consul is a tool for service discovery, monitoring and configuration. Description Multiple vulnerabilities have been found in HashiCorp Consul. Please review the CVE identifiers referenced below for details. Impact Please review the CVE identifiers referenced below for detail...
GLSA-202409-28 : HashiCorp Consul: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202409-28 HashiCorp Consul: Multiple Vulnerabilities Multiple vulnerabilities have been found in HashiCorp Consul. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description blo...
GO-2022-1121 Missing Authorization in HashiCorp Consul in github.com/hashicorp/consul
Missing Authorization in HashiCorp Consul in github.com/hashicorp/consul...
GO-2022-1029 HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul
HashiCorp Consul vulnerable to authorization bypass in github.com/hashicorp/consul...
GO-2022-0953 HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul
HashiCorp Consul Ingress Gateway Panic Can Shutdown Servers in github.com/hashicorp/consul...
GO-2022-0894 Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul
Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul...
GO-2022-0895 HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul
HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul...