Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: HashiCorp Consul, Consul Enterprise 1.20.1 Clear all filters
TI-2024-09286 CVE-2024-10006 · GHSA-5c4w-8hhh-3c3h

Consul L7 Intentions Vulnerable To Headers Bypass

Priority MEDIUM 42

A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using Headers in L7 traffic intentions could bypass HTTP header based access rules.

CVSS 3.1HIGH 8.3 Network No auth No interaction EPSS 0.00467 Published 2024-10-30 Fixed in 1.20.1 CWE-644
TI-2024-09285 CVE-2024-10005 · GHSA-chgm-7r52-whjj

Consul L7 Intentions Vulnerable To URL Path Bypass

Priority LOW 39

A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using URL paths in L7 traffic intentions could bypass HTTP request path-based access rules.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00772 Published 2024-10-30 Fixed in 1.20.1 CWE-22