CVE-2020-12797

HashiCorp Consul and Consul Enterprise failed to enforce changes to legacy ACL token rules due to non-propagation to secondary data centers. Introduced in 1.4.0, fixed in 1.6.6 and 1.7.4...

CVE-2020-12758

HashiCorp Consul and Consul Enterprise could crash when configured with an abnormally-formed service-router entry. Introduced in 1.6.0, fixed in 1.6.6 and 1.7.4...

CVE-2020-12758

HashiCorp Consul and Consul Enterprise could crash when configured with an abnormally-formed service-router entry. Introduced in 1.6.0, fixed in 1.6.6 and 1.7.4...

CVE-2020-12758

CVE-2020-12758 affects HashiCorp Consul and Consul Enterprise. A crash can occur when configured with an abnormally-formed service-router entry. Introduced in 1.6.0 and fixed in 1.6.6 and 1.7.4. Public details confirm the impact is a crash; no exploitation details are provided in the connected so...

CVE-2020-13250

CVE-2020-13250 affects HashiCorp Consul and Consul Enterprise, where an HTTP API (1.2.0) and DNS (1.4.3) caching feature could be abused to cause a denial of service. The vulnerability is fixed in Consul 1.6.6 and Consul Enterprise 1.7.4. The provided connected documents confirm the core impact (...

CVE-2020-13250

HashiCorp Consul and Consul Enterprise include an HTTP API introduced in 1.2.0 and DNS introduced in 1.4.3 caching feature that was vulnerable to denial of service. Fixed in 1.6.6 and 1.7.4...

CVE-2020-13250

HashiCorp Consul and Consul Enterprise include an HTTP API introduced in 1.2.0 and DNS introduced in 1.4.3 caching feature that was vulnerable to denial of service. Fixed in 1.6.6 and 1.7.4...

PT-2020-13248 · Hashicorp · Hashicorp Consul +1

Name of the Vulnerable Software and Affected Versions: HashiCorp Consul and Consul Enterprise versions 1.6.0 through 1.6.5 HashiCorp Consul and Consul Enterprise versions 1.7.0 through 1.7.3 Description: The issue is related to a denial of service DoS condition that can occur when HashiCorp Consu...

PT-2020-13397 · Hashicorp +1 · Hashicorp Consul +2

Name of the Vulnerable Software and Affected Versions: HashiCorp Consul versions 1.2.0 through 1.6.5 HashiCorp Consul versions 1.4.3 through 1.7.3 Description: The issue is related to a denial of service vulnerability in the HTTP API and DNS caching feature of HashiCorp Consul and Consul...

PT-2020-13371 · Hashicorp +1 · Hashicorp Consul +2

Name of the Vulnerable Software and Affected Versions: HashiCorp Consul and Consul Enterprise versions 1.4.0 through 1.6.5 HashiCorp Consul and Consul Enterprise versions 1.7.0 through 1.7.3 Description: The issue arises from the improper enforcement of scope for local tokens issued by a primary...

Malicious Package

Overview bosh-clipluginconsul is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using...

CVE-2020-7219

HashiCorp Consul and Consul Enterprise up to 1.6.2 HTTP/RPC services allowed unbounded resource usage, and were susceptible to unauthenticated denial of service. Fixed in 1.6.3. Mitigation Enforce network connection limits on Consul server agents by using the following iptables rule: iptables -A...

Photon OS 3.0: Consul PHSA-2020-3.0-0069

An update of the consul package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0069. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid134873;...

Critical Photon OS Security Update - PHSA-2020-3.0-0069

Updates of 'linux-aws', 'linux', 'consul', 'linux-secure', 'linux-esx', 'apache-tomcat' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2020-0069

Updates of 'consul', 'apache-tomcat', 'linux-esx', 'linux', 'linux-secure', 'linux-aws' packages of Photon OS have been released...

Information Disclosure

github.com/hashicorp/consul is vulnerable to information disclosure. The vulnerability exists as there was a lack of access control to the v1/agent/health/service/ endpoints...

CVE-2020-7955

HashiCorp Consul and Consul Enterprise 1.4.1 through 1.6.2 did not uniformly enforce ACLs across all API endpoints, resulting in potential unintended information disclosure. Fixed in 1.6.3...

HashiCorp Consul HTTP/RPC services Denial of Service Vulnerability

HashiCorp Consul is a service grid for service discovery, runtime configuration and solutions for microservice applications and infrastructure. A security vulnerability exists in HashiCorp Consul and Consul Enterprise versions 1.6.2 and earlier. An attacker could exploit the vulnerability to caus...

HashiCorp Consul Information Disclosure Vulnerability

HashiCorp Consul is a distributed, highly available data center-aware solution. The product is used to connect and provision applications across dynamically distributed infrastructures. A security vulnerability exists in HashiCorp Consul and Consul Enterprise versions 1.4.1 through 1.6.2, which...

Denial Of Service (DoS)

github.com/hashicorp/consul is vulnerable to denial of service DoS. The attack exists due to a lack of controlling unbounded resource usage via unauthenticated HTTP or RPC connections, allowing an attacker to trigger excessive load and crash the server...