GO-2022-0879 Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul

Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul...

GO-2022-0859 Improper Input Validation in HashiCorp Consul in github.com/hashicorp/consul

Improper Input Validation in HashiCorp Consul in github.com/hashicorp/consul...

GO-2022-0861 Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

Denial of Service DoS in HashiCorp Consul in github.com/hashicorp/consul...

GO-2022-0847 Incorrect Permission Assignment for Critical Resource in Hashicorp Consul in github.com/hashicorp/consul

Incorrect Permission Assignment for Critical Resource in Hashicorp Consul in github.com/hashicorp/consul...

GO-2022-0776 Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul

Denial of Service DoS in HashiCorp Consul in github.com/hashicorp/consul...

GO-2022-0615 Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul

Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul...

GO-2022-0593 HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul

HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul...

GO-2022-0559 HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul

HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul...

GO-2023-1945 HashiCorp Consul Access Restriction Bypass in github.com/hashicorp/consul

HashiCorp Consul Access Restriction Bypass in github.com/hashicorp/consul...

GO-2023-1850 HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul

HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul...

GO-2023-1851 HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul

HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul...

GO-2023-1828 Hashicorp Consul allows user with service:write permissions to patch remote proxy instances in github.com/hashicorp/consul

Hashicorp Consul allows user with service:write permissions to patch remote proxy instances in github.com/hashicorp/consul...

GO-2023-1827 Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul

Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul...

GO-2023-1853 HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul

HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul...

GO-2023-1852 HashiCorp Consul Incorrect Access Control vulnerability in github.com/hashicorp/consul

HashiCorp Consul Incorrect Access Control vulnerability in github.com/hashicorp/consul...

GO-2023-1639 Consul Server Panic when Ingress and API Gateways Configured with Peering Connections in github.com/hashicorp/consul

Consul Server Panic when Ingress and API Gateways Configured with Peering Connections in github.com/hashicorp/consul...

The vulnerability of the Consul and Consul Enterprise service configuration tool lies in the premature release of resources during the expected lifespan of the service. This allows a perpetrator to trigger a service failure.

The vulnerability of the Consul and Consul Enterprise service configuration tool is related to an error that allows a one-node cluster with a service named the same as the local service to potentially compromise the Consul system. Exploiting this vulnerability could enable a malicious actor to...

ROS-20240805-03

Vulnerability of HTTP/2 protocol implementation is related to the possibility of forming a stream of requests within an already established network connection without opening new network connections and without confirming receipt of requests. The vulnerability of the HTTP/2 protocol implementatio...

Consul UI Development Workflows Vulnerable to Dependency Confusion

Summary HashiCorp Consul and Consul Enterprise development workflows for releases from 1.12.0 up to 1.17.6, 1.18.2, and 1.19.0 were vulnerable to frontend dependency confusion which exclusively impacted development environments. This vulnerability was fixed in Consul development workflows for...

Photon OS 3.0: Consul PHSA-2022-3.0-0374

An update of the consul package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-3.0-0374. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...