1232 matches found
GO-2022-0895 HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul
HashiCorp Consul L7 deny intention results in an allow action in github.com/hashicorp/consul...
GO-2022-0894 Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul
Hashicorp Consul Missing SSL Certificate Validation in github.com/hashicorp/consul...
GO-2022-0861 Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul
Denial of Service DoS in HashiCorp Consul in github.com/hashicorp/consul...
GO-2022-0879 Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul
Allocation of Resources Without Limits or Throttling in Hashicorp Consul in github.com/hashicorp/consul...
GO-2022-0874 Incorrect Authorization in HashiCorp Consul in github.com/hashicorp/consul
Incorrect Authorization in HashiCorp Consul in github.com/hashicorp/consul...
GO-2022-0859 Improper Input Validation in HashiCorp Consul in github.com/hashicorp/consul
Improper Input Validation in HashiCorp Consul in github.com/hashicorp/consul...
GO-2022-0847 Incorrect Permission Assignment for Critical Resource in Hashicorp Consul in github.com/hashicorp/consul
Incorrect Permission Assignment for Critical Resource in Hashicorp Consul in github.com/hashicorp/consul...
GO-2022-0776 Denial of Service (DoS) in HashiCorp Consul in github.com/hashicorp/consul
Denial of Service DoS in HashiCorp Consul in github.com/hashicorp/consul...
GO-2022-0615 Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul
Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul...
GO-2022-0593 HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul
HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul...
GO-2022-0559 HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul
HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul...
GO-2023-1945 HashiCorp Consul Access Restriction Bypass in github.com/hashicorp/consul
HashiCorp Consul Access Restriction Bypass in github.com/hashicorp/consul...
GO-2023-1827 Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul
Hashicorp Consul vulnerable to denial of service in github.com/hashicorp/consul...
GO-2023-1851 HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul
HashiCorp Consul Cross-site Scripting vulnerability in github.com/hashicorp/consul...
GO-2023-1850 HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul
HashiCorp Consul can use cleartext agent-to-agent RPC communication in github.com/hashicorp/consul...
GO-2023-1852 HashiCorp Consul Incorrect Access Control vulnerability in github.com/hashicorp/consul
HashiCorp Consul Incorrect Access Control vulnerability in github.com/hashicorp/consul...
GO-2023-1828 Hashicorp Consul allows user with service:write permissions to patch remote proxy instances in github.com/hashicorp/consul
Hashicorp Consul allows user with service:write permissions to patch remote proxy instances in github.com/hashicorp/consul...
GO-2023-1853 HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul
HashiCorp Consul vulnerable to Origin Validation Error in github.com/hashicorp/consul...
GO-2023-1639 Consul Server Panic when Ingress and API Gateways Configured with Peering Connections in github.com/hashicorp/consul
Consul Server Panic when Ingress and API Gateways Configured with Peering Connections in github.com/hashicorp/consul...
The vulnerability of the Consul and Consul Enterprise service configuration tool lies in the premature release of resources during the expected lifespan of the service. This allows a perpetrator to trigger a service failure.
The vulnerability of the Consul and Consul Enterprise service configuration tool is related to an error that allows a one-node cluster with a service named the same as the local service to potentially compromise the Consul system. Exploiting this vulnerability could enable a malicious actor to...