Consul Envoy Extension Downstream Proxy Configuration By Upstream Service Owner

Summary A vulnerability was identified in Consul and Consul Enterprise “Consul” such that any user with service:write permissions to use Envoy extensions configured via service-defaults to patch remote proxy instances that target the configured service, regardless of whether the user has permissi...