Authentication Bypass

🗓️ 27 Sep 2022 13:08:32Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 33 Views

Github Consul Authentication Bypass Vulnerabilit

Reporter	Title	Published	Views	Family All 56
AlpineLinux	CVE-2022-40716	23 Sep 202200:00	–	alpinelinux
BDU FSTEC	The vulnerability of the Consul and Consul Enterprise service configuration tool, related to unvalidated returned values, allows attackers to circumvent established security restrictions.	17 Jul 202500:00	–	bdu_fstec
Chainguard	CVE-2022-40716 vulnerabilities	23 Sep 202212:15	–	cgr
Circl	CVE-2022-40716	23 Sep 202216:28	–	circl
CNNVD	HashiCorp Consul 安全漏洞	23 Sep 202200:00	–	cnnvd
CVE	CVE-2022-40716	23 Sep 202200:00	–	cve
Cvelist	CVE-2022-40716	23 Sep 202200:00	–	cvelist
Debian CVE	CVE-2022-40716	23 Sep 202200:00	–	debiancve
EUVD	EUVD-2022-6870	3 Oct 202520:07	–	euvd
Fedora	[SECURITY] Fedora 38 Update: moby-engine-24.0.5-1.fc38	30 Aug 202301:37	–	fedora

Vulners

Node

hashicorp consulMatch1.12.0-r2go

AND

hashicorp consulMatch1.12.0-r4go

AND

hashicorp consulMatch1.12.0-r0go

AND

hashicorp consulMatch1.12.0-r3go

AND

hashicorp consulMatch1.12.0-r1go

AND

alpinelinux alpine_linuxMatch3.16

hashicorp consulMatch1.12.3-r0go

AND

hashicorp consulMatch1.10.3-r0go

AND

hashicorp consulMatch1.7.1-r1go

AND

hashicorp consulMatch1.9.3-r0go

AND

hashicorp consulMatch1.13.1-r1go

AND

hashicorp consulMatch1.10.2-r0go

AND

hashicorp consulMatch1.12.2-r0go

AND

hashicorp consulMatch1.11.1-r0go

AND

hashicorp consulMatch1.7.3-r0go

AND

hashicorp consulMatch1.10.0-r0go

AND

hashicorp consulMatch1.12.0-r0go

AND

hashicorp consulMatch1.9.6-r0go

AND

hashicorp consulMatch1.11.0-r0go

AND

hashicorp consulMatch1.11.3-r0go

AND

hashicorp consulMatch1.9.5-r0go

AND

hashicorp consulMatch1.10.2-r1go

AND

hashicorp consulMatch1.9.4-r0go

AND

hashicorp consulMatch1.12.3-r1go

AND

hashicorp consulMatch1.11.2-r1go

AND

hashicorp consulMatch1.7.2-r0go

AND

hashicorp consulMatch1.12.0-r1go

AND

hashicorp consulMatch1.13.1-r0go

AND

hashicorp consulMatch1.11.4-r1go

AND

hashicorp consulMatch1.11.2-r0go

AND

hashicorp consulMatch1.12.3-r2go

AND

hashicorp consulMatch1.10.1-r0go

AND

hashicorp consulMatch1.11.4-r0go

AND

hashicorp consulMatch1.9.5-r1go

AND

hashicorp consulMatch1.7.2-r1go

AND

hashicorp consulMatch1.10.4-r0go

AND

alpinelinux alpine_linuxMatchedge

hashicorp github.com/hashicorp/consulRangev1.8.1–1.8.1go

hashicorp github.com/hashicorp/consulRangev1.12.0-beta1–1.12.0-beta1go

hashicorp github.com/hashicorp/consulRangev1.13.0-alpha1–1.13.0-alpha1go

Source	Link
github	www.github.com/hashicorp/consul/commit/91d1d6fb43d2cd00bfa78654626b6ee94c801557
github	www.github.com/hashicorp/consul/releases/tag/v1.11.9
github	www.github.com/hashicorp/consul/pull/14585
github	www.github.com/hashicorp/consul/pull/14591
github	www.github.com/hashicorp/consul/commit/d1c6b87eb21911f19f5d691b603635da178d9ce0
github	www.github.com/hashicorp/consul/releases/tag/v1.12.5
github	www.github.com/hashicorp/consul/commit/8f6fb4f6fe9488b8ec37da71ac503081d7d3760b
github	www.github.com/hashicorp/consul/pull/14590
github	www.github.com/hashicorp/consul/releases/tag/v1.13.2
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZTE4ITXXPIWZEQ4HYQCB6N6GZIMWXDAI/

07 Nov 2023 22:09Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.16.5

EPSS0.00827