Описание
A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using Headers in L7 traffic intentions could bypass HTTP header based access rules.
Уязвимые конфигурации
Конфигурация 1Версия от 1.4.1 (включая) до 1.20.1 (исключая)Версия от 1.9.0 (включая) до 1.15.15 (исключая)Версия от 1.18.0 (включая) до 1.18.5 (исключая)Версия от 1.19.0 (включая) до 1.19.3 (исключая)
Одно из
cpe:2.3:a:hashicorp:consul:*:*:*:*:community:*:*:*
cpe:2.3:a:hashicorp:consul:*:*:*:*:enterprise:*:*:*
cpe:2.3:a:hashicorp:consul:*:*:*:*:enterprise:*:*:*
cpe:2.3:a:hashicorp:consul:*:*:*:*:enterprise:*:*:*
cpe:2.3:a:hashicorp:consul:1.20.0:*:*:*:enterprise:*:*:*
EPSS
Процентиль: 10%
0.00035
Низкий
8.3 High
CVSS3
5.8 Medium
CVSS3
Дефекты
CWE-644
CWE-116
Связанные уязвимости
CVSS3: 8.3
ubuntu
около 1 года назад
A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using Headers in L7 traffic intentions could bypass HTTP header based access rules.
CVSS3: 8.3
redhat
около 1 года назад
A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using Headers in L7 traffic intentions could bypass HTTP header based access rules.
CVSS3: 8.3
debian
около 1 года назад
A vulnerability was identified in Consul and Consul Enterprise (\u201c ...
CVSS3: 8.3
github
около 1 года назад
Hashicorp Consul Improper Neutralization of HTTP Headers for Scripting Syntax vulnerability
EPSS
Процентиль: 10%
0.00035
Низкий
8.3 High
CVSS3
5.8 Medium
CVSS3
Дефекты
CWE-644
CWE-116