Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4qvx-qq5w-695p

Опубликовано: 14 мая 2022
Источник: github
Github: Прошло ревью
CVSS3: 5.9

Описание

HashiCorp Consul can use cleartext agent-to-agent RPC communication

HashiCorp Consul 0.5.1 through 1.4.0 can use cleartext agent-to-agent RPC communication because the verify_outgoing setting is improperly documented. NOTE: the vendor has provided reconfiguration steps that do not require a software upgrade.

Пакеты

Наименование

github.com/hashicorp/consul

go
Затронутые версииВерсия исправления

>= 0.5.1, < 1.4.1

1.4.1

EPSS

Процентиль: 62%
0.00427
Низкий

5.9 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.9
ubuntu
около 7 лет назад

HashiCorp Consul 0.5.1 through 1.4.0 can use cleartext agent-to-agent RPC communication because the verify_outgoing setting is improperly documented. NOTE: the vendor has provided reconfiguration steps that do not require a software upgrade.

CVSS3: 5.9
nvd
около 7 лет назад

HashiCorp Consul 0.5.1 through 1.4.0 can use cleartext agent-to-agent RPC communication because the verify_outgoing setting is improperly documented. NOTE: the vendor has provided reconfiguration steps that do not require a software upgrade.

CVSS3: 5.9
debian
около 7 лет назад

HashiCorp Consul 0.5.1 through 1.4.0 can use cleartext agent-to-agent ...

EPSS

Процентиль: 62%
0.00427
Низкий

5.9 Medium

CVSS3