1485 matches found
Photon OS 4.0: Consul PHSA-2022-4.0-0143
An update of the consul package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0143. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Consul PHSA-2023-5.0-0053
An update of the consul package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-0053. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 3.0: Consul PHSA-2020-3.0-0151
An update of the consul package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0151. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 4.0: Consul PHSA-2022-4.0-0166
An update of the consul package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0166. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 4.0: Consul PHSA-2023-4.0-0373
An update of the consul package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0373. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 3.0: Consul PHSA-2019-3.0-0017
An update of the consul package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0017. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
CBL Mariner 2.0 Security Update: telegraf (CVE-2023-2816)
The version of telegraf installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-2816 advisory. - Consul and Consul Enterprise allowed any user with service:write permissions to use Envoy extensions...
GO-2024-2501 Denial of service in HashiCorp Consul in github.com/hashicorp/consul
Denial of service in HashiCorp Consul in github.com/hashicorp/consul...
GO-2024-2505 Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul
Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul...
Malicious code in bosh-cli_plugin_consul (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in consul-nspaces (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2021 Malicious code in consul-nspaces (npm)
--- -= Per source details. Do not edit below this line.=-...
GHSA-V6V8-XJ6M-XWQH vulnerabilities
Vulnerabilities for packages: crossplane-provider-azure-authorization, step-ca-fips, terragrunt, terraform, nuclei, tkn-fips, glab, flux, pulumi, src-fingerprint, fulcio-fips, flux-image-reflector-controller, cosign-fips, skopeo, sigstore-scaffolding-fips, rekor, kubernetes-event-exporter,...
GO-2024-2704 Consul JWT Auth in L7 Intentions Allow for Mismatched Service Identity and JWT Providers in github.com/hashicorp/consul
Consul JWT Auth in L7 Intentions Allow for Mismatched Service Identity and JWT Providers in github.com/hashicorp/consul...
Fedora 37 : moby-engine (2023-fde38dda12)
The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-fde38dda12 advisory. update to 20.10.22 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...
GHSA-M9W6-WP3H-VQ8G vulnerabilities
Vulnerabilities for packages: juicefs, kubernetes-dns-node-cache, cloudflared...
CVE-2024-0874 vulnerabilities
Vulnerabilities for packages: juicefs, kubernetes-dns-node-cache, cloudflared...
GO-2024-2683 Improper handling of node names in JWT claims assertions in github.com/hashicorp/consul
HashiCorp Consul does not properly validate the node or segment names prior to interpolation and usage in JWT claim assertions with the auto config RPC...
BIT-GITLAB-2023-5332 Dependency on Vulnerable Third-Party Component in GitLab
Patch in third party library Consul requires 'enable-script-checks' to be set to False. This was required to enable a patch by the vendor. Without this setting the patch could be bypassed. This only affects GitLab-EE...