1232 matches found
ROS-20240805-03
Vulnerability of HTTP/2 protocol implementation is related to the possibility of forming a stream of requests within an already established network connection without opening new network connections and without confirming receipt of requests. The vulnerability of the HTTP/2 protocol implementatio...
Consul UI Development Workflows Vulnerable to Dependency Confusion
Summary HashiCorp Consul and Consul Enterprise development workflows for releases from 1.12.0 up to 1.17.6, 1.18.2, and 1.19.0 were vulnerable to frontend dependency confusion which exclusively impacted development environments. This vulnerability was fixed in Consul development workflows for...
Photon OS 3.0: Consul PHSA-2022-3.0-0374
An update of the consul package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-3.0-0374. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 3.0: Consul PHSA-2023-3.0-0587
An update of the consul package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-3.0-0587. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 4.0: Consul PHSA-2022-4.0-0166
An update of the consul package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0166. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 3.0: Consul PHSA-2020-3.0-0151
An update of the consul package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0151. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 4.0: Consul PHSA-2022-4.0-0143
An update of the consul package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0143. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Consul PHSA-2023-5.0-0053
An update of the consul package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-0053. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 4.0: Consul PHSA-2023-4.0-0373
An update of the consul package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0373. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 3.0: Consul PHSA-2019-3.0-0017
An update of the consul package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0017. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
CBL Mariner 2.0 Security Update: telegraf (CVE-2023-2816)
The version of telegraf installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-2816 advisory. - Consul and Consul Enterprise allowed any user with service:write permissions to use Envoy extensions...
GO-2024-2505 Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul
Privilege Escalation in HashiCorp Consul in github.com/hashicorp/consul...
GO-2024-2501 Denial of service in HashiCorp Consul in github.com/hashicorp/consul
Denial of service in HashiCorp Consul in github.com/hashicorp/consul...
Malicious code in bosh-cli_plugin_consul (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in consul-nspaces (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2021 Malicious code in consul-nspaces (npm)
--- -= Per source details. Do not edit below this line.=-...
GHSA-V6V8-XJ6M-XWQH vulnerabilities
Vulnerabilities for packages: terraform-provider-azurerm, terragrunt, tkn, opentelemetry-collector-fips, argo-events, crossplane-provider-azure, pulumi-kubernetes-operator, argo-events-fips, vault-csi-provider, nuclei, cosign-fips, falcoctl-fips, src-fingerprint-fips, vexctl,...
GO-2024-2704 Consul JWT Auth in L7 Intentions Allow for Mismatched Service Identity and JWT Providers in github.com/hashicorp/consul
Consul JWT Auth in L7 Intentions Allow for Mismatched Service Identity and JWT Providers in github.com/hashicorp/consul...
Fedora 37 : moby-engine (2023-fde38dda12)
The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-fde38dda12 advisory. update to 20.10.22 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...
