Find real vulnerabilities before they ship
HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. Fixed in 1.8.15, 1.9.9 and 1.10.2.
Base Score
6.5| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| github.com/hashicorp/consul(Go) | 1.10.1 | 1.10.2 | N/A |
| github.com/hashicorp/consul(Go) | 1.9.0 | 1.9.9 | N/A |
| github.com/hashicorp/consul(Go) | 0 | 1.8.15 | N/A |
| Base Score | 6.5 |
|---|---|
| Vector String | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
| Base Severity | Medium |
| Version | 3.1 |
| Attack Vector (AV) | NETWORK |
