Логотип exploitDog
bind:CVE-2023-2816
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2023-2816

Количество 5

Количество 5

ubuntu логотип

CVE-2023-2816

больше 2 лет назад

Consul and Consul Enterprise allowed any user with service:write permissions to use Envoy extensions configured via service-defaults to patch remote proxy instances that target the configured service, regardless of whether the user has permission to modify the service(s) corresponding to those modified proxies.

CVSS3: 8.7
EPSS: Низкий
nvd логотип

CVE-2023-2816

больше 2 лет назад

Consul and Consul Enterprise allowed any user with service:write permissions to use Envoy extensions configured via service-defaults to patch remote proxy instances that target the configured service, regardless of whether the user has permission to modify the service(s) corresponding to those modified proxies.

CVSS3: 8.7
EPSS: Низкий
msrc логотип

CVE-2023-2816

больше 2 лет назад

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2023-2816

больше 2 лет назад

Consul and Consul Enterprise allowed any user with service:write permi ...

CVSS3: 8.7
EPSS: Низкий
github логотип

GHSA-rqjq-ww83-wv5c

больше 2 лет назад

Hashicorp Consul allows user with service:write permissions to patch remote proxy instances

CVSS3: 8.7
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2023-2816

Consul and Consul Enterprise allowed any user with service:write permissions to use Envoy extensions configured via service-defaults to patch remote proxy instances that target the configured service, regardless of whether the user has permission to modify the service(s) corresponding to those modified proxies.

CVSS3: 8.7
0%
Низкий
больше 2 лет назад
nvd логотип
CVE-2023-2816

Consul and Consul Enterprise allowed any user with service:write permissions to use Envoy extensions configured via service-defaults to patch remote proxy instances that target the configured service, regardless of whether the user has permission to modify the service(s) corresponding to those modified proxies.

CVSS3: 8.7
0%
Низкий
больше 2 лет назад
msrc логотип
CVSS3: 6.5
0%
Низкий
больше 2 лет назад
debian логотип
CVE-2023-2816

Consul and Consul Enterprise allowed any user with service:write permi ...

CVSS3: 8.7
0%
Низкий
больше 2 лет назад
github логотип
GHSA-rqjq-ww83-wv5c

Hashicorp Consul allows user with service:write permissions to patch remote proxy instances

CVSS3: 8.7
0%
Низкий
больше 2 лет назад

Уязвимостей на страницу