GHSA-5C4W-8HHH-3C3H vulnerabilities

Vulnerabilities for packages: consul, consul-fips...

CVE-2024-10086 vulnerabilities

Vulnerabilities for packages: consul, consul-fips...

CVE-2024-10006 vulnerabilities

Vulnerabilities for packages: consul, consul-fips...

Linux Distros Unpatched Vulnerability : CVE-2018-19653

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Consul 0.5.1 through 1.4.0 can use cleartext agent-to-agent RPC communication because the verifyoutgoing setting is improperly documented. NOTE: the...

Linux Distros Unpatched Vulnerability : CVE-2020-25864

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Consul and Consul Enterprise up to version 1.9.4 key-value KV raw mode was vulnerable to cross-site scripting. Fixed in 1.9.5, 1.8.10 and 1.7.14...

Linux Distros Unpatched Vulnerability : CVE-2020-13250

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Consul and Consul Enterprise include an HTTP API introduced in 1.2.0 and DNS introduced in 1.4.3 caching feature that was vulnerable to denial of...

MAL-2025-17500 Malicious code in consul-acls (npm)

The package consul-acls was found to contain malicious code...

Malicious code in consul-partitions (npm)

The package consul-partitions was found to contain malicious code...

Malicious code in consul-lock-sessions (npm)

The package consul-lock-sessions was found to contain malicious code...

MAL-2025-17502 Malicious code in consul-lock-sessions (npm)

The package consul-lock-sessions was found to contain malicious code...

Malicious code in consul-acls (npm)

The package consul-acls was found to contain malicious code...

Malicious code in consul-hcp (npm)

The package consul-hcp was found to contain malicious code...

Malicious code in consul-peerings (npm)

The package consul-peerings was found to contain malicious code...

MAL-2025-17504 Malicious code in consul-peerings (npm)

The package consul-peerings was found to contain malicious code...

MAL-2025-17501 Malicious code in consul-hcp (npm)

The package consul-hcp was found to contain malicious code...

MAL-2025-17503 Malicious code in consul-partitions (npm)

The package consul-partitions was found to contain malicious code...

The vulnerability of the Consul and Consul Enterprise service configuration tool, related to the disclosure of information, allows a perpetrator to access potentially confidential information.

The vulnerability of the Consul and Consul Enterprise service configuration tool is related to the disclosure of information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to potentially confidential information...

The vulnerability of the Consul and Consul Enterprise service configuration tool, related to unvalidated returned values, allows attackers to circumvent established security restrictions.

The vulnerability of the Consul and Consul Enterprise service configuration tool is related to an unvalidated returned value. Exploiting this vulnerability allows a malicious actor to bypass established security restrictions from a remote location...

SUSE CVE-2025-48865

Fabio is an HTTPS and TCP router for deploying applications managed by consul. Prior to version 1.6.6, Fabio allows clients to remove X-Forwarded headers except X-Forwarded-For due to a vulnerability in how it processes hop-by-hop headers. Fabio adds HTTP headers like X-Forwarded-Host and...

ROS-20250624-05

A vulnerability in the Consul and Consul Enterprise service configuration tool is related to errors in the processing of CSR requests at the RPC endpoint. Exploitation of the vulnerability could allow an attacker acting remotely to bypass the implemented security restrictions. remotely to bypass...