Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-0845

Опубликовано: 09 мар. 2023
Источник: nvd
CVSS3: 4.9
CVSS3: 6.5
EPSS Низкий

Описание

Consul and Consul Enterprise allowed an authenticated user with service:write permissions to trigger a workflow that causes Consul server and client agents to crash under certain circumstances. This vulnerability was fixed in Consul 1.14.5.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:hashicorp:consul:*:*:*:*:-:*:*:*
Версия до 1.14.5 (исключая)

EPSS

Процентиль: 52%
0.00287
Низкий

4.9 Medium

CVSS3

6.5 Medium

CVSS3

Дефекты

CWE-476
CWE-476

Связанные уязвимости

CVSS3: 4.9
ubuntu
больше 2 лет назад

Consul and Consul Enterprise allowed an authenticated user with service:write permissions to trigger a workflow that causes Consul server and client agents to crash under certain circumstances. This vulnerability was fixed in Consul 1.14.5.

CVSS3: 6.5
redhat
больше 2 лет назад

Consul and Consul Enterprise allowed an authenticated user with service:write permissions to trigger a workflow that causes Consul server and client agents to crash under certain circumstances. This vulnerability was fixed in Consul 1.14.5.

CVSS3: 4.9
debian
больше 2 лет назад

Consul and Consul Enterprise allowed an authenticated user with servic ...

CVSS3: 6.5
redos
около 2 лет назад

Уязвимость Consul

CVSS3: 6.5
github
больше 2 лет назад

Consul Server Panic when Ingress and API Gateways Configured with Peering Connections

EPSS

Процентиль: 52%
0.00287
Низкий

4.9 Medium

CVSS3

6.5 Medium

CVSS3

Дефекты

CWE-476
CWE-476