Skip to content
OpenAdvisories

Package · Go

github.com/hashicorp/consul

32 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

15 results · Clear filters · Feed

  • High 8.3
    CVE-2024-10006

    Consul L7 Intentions Vulnerable To Headers Bypass

    A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using Headers in L7 traffic intentions could bypass HTTP header based access rules.

    HashiCorp Consul Enterprise Consul consul Debian Ubuntu Go
  • High 8.1
    CVE-2024-10005 Public exploit

    Consul L7 Intentions Vulnerable To URL Path Bypass

    A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using URL paths in L7 traffic intentions could bypass HTTP request path-based access rules.

    HashiCorp Consul Consul Enterprise consul Debian Ubuntu Go
  • High 7.4
    CVE-2023-3518

    JWT Auth in L7 Intentions Allow For Mismatched Service Identity and JWT Providers for Access

    HashiCorp Consul and Consul Enterprise 1.16.0 when using JWT Auth for service mesh incorrectly allows/denies access regardless of service identities. Fixed in 1.16.1.

    HashiCorp Consul Consul Enterprise github.com/hashicorp/consul Go
  • High 8.7
    CVE-2023-2816

    Consul Envoy Extension Downsteam Proxy Configuration By Upstream Service Owner

    Consul and Consul Enterprise allowed any user with service:write permissions to use Envoy extensions configured via service-defaults to patch remote proxy instances that target the configured service, regardless of whether the user has permission to modify th…

    HashiCorp Consul Enterprise Consul consul Ubuntu Go
  • High 7.1
    CVE-2021-41803

    HashiCorp Consul does not properly validate node or segment names prior to usage in JWT claim assertions

    HashiCorp Consul 1.8.1 up to 1.11.8, 1.12.4, and 1.13.1 do not properly validate the node or segment names prior to interpolation and usage in JWT claim assertions with the auto config RPC. Fixed in 1.11.9, 1.12.5, and 1.13.2."

    consul consul github.com/hashicorp/consul consul Debian Ubuntu Alpine Go
  • High 7.5
    CVE-2022-29153

    Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector

    HashiCorp Consul and Consul Enterprise up to 1.9.16, 1.10.9, and 1.11.4 may allow server side request forgery when the Consul client agent follows redirects returned by HTTP health check endpoints. Fixed in 1.9.17, 1.10.10, and 1.11.5.

    consul consul github.com/hashicorp/consul Debian Ubuntu Go
  • High 8.8
    CVE-2021-37219

    HashiCorp Consul Privilege Escalation Vulnerability

    HashiCorp Consul and Consul Enterprise 1.10.1 Raft RPC layer allows non-server agents with a valid certificate signed by the same CA to access server-only functionality, enabling privilege escalation. Fixed in 1.8.15, 1.9.9 and 1.10.2.

    consul consul github.com/hashicorp/consul Debian Ubuntu Go
  • High 7.5
    CVE-2021-36213

    HashiCorp Consul L7 deny intention results in an allow action

    HashiCorp Consul and Consul Enterprise 1.9.0 through 1.10.0 default deny policy with a single L7 application-aware intention deny action cancels out, causing the intention to incorrectly fail open, allowing L4 traffic. Fixed in 1.9.8 and 1.10.1.

    consul github.com/hashicorp/consul Ubuntu Go
  • High 7.5
    CVE-2021-32574

    Hashicorp Consul Missing SSL Certificate Validation

    HashiCorp Consul and Consul Enterprise 1.3.0 through 1.10.0 Envoy proxy TLS configuration does not validate destination service identity in the encoded subject alternative name. Fixed in 1.8.14, 1.9.8, and 1.10.1.

    consul consul github.com/hashicorp/consul Debian Ubuntu Go
  • High 7.5
    CVE-2020-25201

    Denial of service in HashiCorp Consul

    HashiCorp Consul Enterprise version 1.7.0 up to 1.8.4 includes a namespace replication bug which can be triggered to cause denial of service via infinite Raft writes. Fixed in 1.7.9 and 1.8.5.

    consul consul github.com/hashicorp/consul Debian Ubuntu Go
  • High 7.5
    CVE-2020-13250

    Allocation of Resources Without Limits or Throttling in Hashicorp Consul

    HashiCorp Consul and Consul Enterprise include an HTTP API (introduced in 1.2.0) and DNS (introduced in 1.4.3) caching feature that was vulnerable to denial of service. Fixed in 1.6.6 and 1.7.4.

    consul consul github.com/hashicorp/consul Debian Ubuntu Go
  • High 7.5
    CVE-2020-7219

    Denial of Service (DoS) in HashiCorp Consul

    HashiCorp Consul and Consul Enterprise up to 1.6.2 HTTP/RPC services allowed unbounded resource usage, and were susceptible to unauthenticated denial of service. Fixed in 1.6.3.

    consul consul github.com/hashicorp/consul Debian Ubuntu Go
  • High 7.5
    CVE-2019-12291

    HashiCorp Consul Incorrect Access Control vulnerability

    HashiCorp Consul 1.4.0 through 1.5.0 has Incorrect Access Control. Keys not matching a specific ACL rule used for prefix matching in a policy can be deleted by a token using that policy even with default deny settings configured.

    consul consul github.com/hashicorp/consul Debian Ubuntu Go
  • High 7.4
    CVE-2019-9764

    HashiCorp Consul vulnerable to Origin Validation Error

    HashiCorp Consul 1.4.3 lacks server hostname verification for agent-to-agent TLS communication. In other words, the product behaves as if verify_server_hostname were set to false, even when it is actually set to true. This is fixed in 1.4.4.

    consul github.com/hashicorp/consul Ubuntu Go
  • High 8.1
    CVE-2019-8336

    HashiCorp Consul Access Restriction Bypass

    HashiCorp Consul (and Consul Enterprise) 1.4.x before 1.4.3 allows a client to bypass intended access restrictions and obtain the privileges of one other arbitrary token within secondary datacenters, because a token with literally "<hidden>" as its secret is …

    github.com/hashicorp/consul Go