1228 matches found
GHSA-8PJC-487G-W6P2 vulnerabilities
Vulnerabilities for packages: linkerd2-cni-plugin, nri-f5, delve, terraform-mcp-server, rancher-system-upgrade-controller, argo-events, traefik, vault, cluster-api-provider-vsphere, caddy, src, azuredisk-csi, cloud-provider-vsphere, kubernetes-dashboard, swagger, rancher-agent,...
Linux Distros Unpatched Vulnerability : CVE-2020-7219
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Consul and Consul Enterprise up to 1.6.2 HTTP/RPC services allowed unbounded resource usage, and were susceptible to unauthenticated denial of service...
Linux Distros Unpatched Vulnerability : CVE-2021-36213
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Consul and Consul Enterprise 1.9.0 through 1.10.0 default deny policy with a single L7 application-aware intention deny action cancels out, causing th...
Linux Distros Unpatched Vulnerability : CVE-2020-25201
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Consul Enterprise version 1.7.0 up to 1.8.4 includes a namespace replication bug which can be triggered to cause denial of service via infinite Raft...
Linux Distros Unpatched Vulnerability : CVE-2023-0845
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Consul and Consul Enterprise allowed an authenticated user with service:write permissions to trigger a workflow that causes Consul server and client agents to...
Linux Distros Unpatched Vulnerability : CVE-2021-28156
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Consul Enterprise version 1.8.0 up to 1.9.4 audit log can be bypassed by specifically crafted HTTP events. Fixed in 1.9.5, and 1.8.10. CVE-2021-28156...
Linux Distros Unpatched Vulnerability : CVE-2023-2816
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Consul and Consul Enterprise allowed any user with service:write permissions to use Envoy extensions configured via service-defaults to patch remote proxy...
Linux Distros Unpatched Vulnerability : CVE-2019-9764
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Consul 1.4.3 lacks server hostname verification for agent-to-agent TLS communication. In other words, the product behaves as if verifyserverhostname...
Linux Distros Unpatched Vulnerability : CVE-2020-28053
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Consul and Consul Enterprise 1.2.0 up to 1.8.5 allowed operators with operator:read ACL permissions to read the Connect CA private key configuration...
Linux Distros Unpatched Vulnerability : CVE-2020-13170
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Consul and Consul Enterprise did not appropriately enforce scope for local tokens issued by a primary data center, where replication to a secondary da...
Linux Distros Unpatched Vulnerability : CVE-2021-41805
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Consul Enterprise before 1.8.17, 1.9.x before 1.9.11, and 1.10.x before 1.10.4 has Incorrect Access Control. An ACL token with the default...
Linux Distros Unpatched Vulnerability : CVE-2022-3920
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Consul and Consul Enterprise 1.13.0 up to 1.13.3 do not filter cluster filtering's imported nodes and services for HTTP or RPC endpoints used by the U...
Linux Distros Unpatched Vulnerability : CVE-2020-12797
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Consul and Consul Enterprise failed to enforce changes to legacy ACL token rules due to non- propagation to secondary data centers. Introduced in 1.4....
Linux Distros Unpatched Vulnerability : CVE-2023-1297
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Consul and Consul Enterprise's cluster peering implementation contained a flaw whereby a peer cluster with service of the same name as a local service could...
Linux Distros Unpatched Vulnerability : CVE-2020-7955
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Consul and Consul Enterprise 1.4.1 through 1.6.2 did not uniformly enforce ACLs across all API endpoints, resulting in potential unintended informatio...
Linux Distros Unpatched Vulnerability : CVE-2019-12291
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Consul 1.4.0 through 1.5.0 has Incorrect Access Control. Keys not matching a specific ACL rule used for prefix matching in a policy can be deleted by ...
GHSA-99WR-C2PX-GRMH vulnerabilities
Vulnerabilities for packages: consul, consul-fips...
CVE-2024-10005 vulnerabilities
Vulnerabilities for packages: consul, consul-fips...