Insecure Default Configuration

github.com/hashicorp/consul is vulnerable to Insecure Default Configuration. The vulnerability exists because the library does not properly disable the remote proxy patching except AWS Lambda, which allows an attacker with service: write permissions to use Envoy extensions configured via service...

AZL-35303 CVE-2023-2816 affecting package telegraf for versions less than 1.29.4-1

Consul and Consul Enterprise allowed any user with service:write permissions to use Envoy extensions configured via service-defaults to patch remote proxy instances that target the configured service, regardless of whether the user has permission to modify the services corresponding to those...